CVE-2007-4367 Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
HighCVSS 9.3
EPSS 8.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | < 9.23 | 9.23 |
References
- SUSE-SA:2007:050 third-party-advisory vendor-advisory
- 26477 broken-link patch third-party-advisory
- 26545 broken-link third-party-advisory
- 26635 broken-link third-party-advisory
- GLSA-200708-17 third-party-advisory vendor-advisory
- www.opera.com broken-link vendor-advisory
- 25331 broken-link exploit third-party-advisory vdb-entry
- 1018572 broken-link third-party-advisory vdb-entry
- ADV-2007-2904 broken-link vdb-entry
- opera-javascript-code-execution(36039) third-party-advisory vdb-entry