Vulnerabilities > Opera > Opera Browser > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-10-23 CVE-2008-4694 Link Following vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL.
network
opera CWE-59
critical
9.3
2008-09-27 CVE-2008-4292 Credentials Management vulnerability in Opera Browser
Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors.
network
low complexity
opera CWE-255
critical
10.0
2008-04-12 CVE-2008-1762 Resource Management Errors vulnerability in Opera Browser
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.
network
opera CWE-399
critical
9.3
2007-12-24 CVE-2007-6521 Cryptographic Issues vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.
network
low complexity
opera CWE-310
critical
10.0
2007-10-18 CVE-2007-5476 Unspecified vulnerability in Adobe Flash Player On Opera Browser For Mac OSX
Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors.
network
low complexity
apple adobe opera
critical
10.0
2007-10-18 CVE-2007-5541 Improper Input Validation vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.
network
opera CWE-20
critical
9.3
2007-08-15 CVE-2007-4367 Release of Invalid Pointer or Reference vulnerability in Opera Browser
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
network
opera CWE-763
critical
9.3
2007-07-21 CVE-2007-3929 Use After Free vulnerability in Opera Browser
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.
network
opera CWE-416
critical
9.3
2007-05-22 CVE-2007-2809 Classic Buffer Overflow vulnerability in Opera Browser
Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file.
network
opera CWE-120
critical
9.3
2007-01-09 CVE-2007-0126 Buffer Errors vulnerability in Opera Browser 9.02
Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.
network
opera CWE-119
critical
9.3