Vulnerabilities > Opera > Opera Browser > 9.00

DATE CVE VULNERABILITY TITLE RISK
2008-02-29 CVE-2008-1080 Improper Input Validation vulnerability in Opera Browser
Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input.
network
opera CWE-20
6.8
2007-12-24 CVE-2007-6524 Information Exposure vulnerability in Opera Browser
Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.
network
low complexity
opera CWE-200
7.8
2007-12-24 CVE-2007-6522 Cross-Site Scripting vulnerability in Opera Browser
The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains.
network
opera CWE-79
4.3
2007-12-24 CVE-2007-6521 Cryptographic Issues vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.
network
low complexity
opera CWE-310
critical
10.0
2007-12-24 CVE-2007-6520 Cross-Site Scripting vulnerability in Opera Browser
Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.
network
opera CWE-79
4.3
2007-10-18 CVE-2007-5541 Improper Input Validation vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.
network
opera CWE-20
critical
9.3
2007-10-18 CVE-2007-5540 Improper Input Validation vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors.
network
low complexity
opera CWE-20
7.5
2007-10-18 CVE-2007-5476 Unspecified vulnerability in Adobe Flash Player On Opera Browser For Mac OSX
Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors.
network
low complexity
apple adobe opera
critical
10.0
2007-08-15 CVE-2007-4367 Release of Invalid Pointer or Reference vulnerability in Opera Browser
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
network
opera CWE-763
critical
9.3
2007-07-21 CVE-2007-3929 Use After Free vulnerability in Opera Browser
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.
network
opera CWE-416
critical
9.3