CVE-2007-3929 Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangl...
HighCVSS 9.3
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | < 9.22 | 9.22 |
References
- 20070719 Opera Software Opera Web Browser BitTorrent Dangling Pointer Vulnerability broken-link third-party-advisory vendor-advisory
- 26138 broken-link patch third-party-advisory
- 26545 broken-link third-party-advisory
- GLSA-200708-17 third-party-advisory vendor-advisory
- SUSE-SR:2007:015 broken-link vendor-advisory
- www.opera.com broken-link patch vendor-advisory
- 24970 broken-link third-party-advisory vdb-entry
- 1018431 broken-link third-party-advisory vdb-entry
- ADV-2007-2584 broken-link vdb-entry
- opera-bittorrent-code-execution(35509) third-party-advisory vdb-entry