Search the knowledgebase


Advisory: Specially crafted addresses can execute arbitrary code

Severity: Extremely Severe

Problem Description

If a malicious page redirects Opera to a specially crafted address (URL), it can cause Opera to crash. Given sufficient address content, the crash could cause execution of code controlled by the attacking page.

Opera's Response

Opera Software has released Opera 9.60, where this issue has been fixed.

Credits

Thanks to Chris of Matasano Security for reporting this issue to Opera Software.

Browse through articles in the same categories: advisory