Advisory: a specially crafted JavaScript can make Opera execute arbitrary code

A specially crafted JavaScript can make Opera execute arbitrary code.

Severity:

Highly severe

Problem description

A virtual function call on an invalid pointer that may reference data crafted by the attacker can be used to execute arbitrary code.

Opera's response

Opera Software has released Opera 9.23, where this issue has been fixed.

Credits

Thanks to Mozilla.org for providing their JavaScript fuzzer.

Browse through articles in the same categories: advisory

Opera