Vulnerabilities > Opera > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-04-12 CVE-2008-1764 Unspecified vulnerability in Opera
Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs."
network
opera
critical
9.3
2008-04-12 CVE-2008-1762 Resource Management Errors vulnerability in Opera Browser
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.
network
opera CWE-399
critical
9.3
2008-04-12 CVE-2008-1761 Resource Management Errors vulnerability in Opera
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access.
network
opera CWE-399
critical
9.3
2007-12-24 CVE-2007-6521 Cryptographic Issues vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.
network
low complexity
opera CWE-310
critical
10.0
2007-10-18 CVE-2007-5541 Improper Input Validation vulnerability in Opera Browser
Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.
network
opera CWE-20
critical
9.3
2007-10-18 CVE-2007-5476 Unspecified vulnerability in Adobe Flash Player On Opera Browser For Mac OSX
Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors.
network
low complexity
apple adobe opera
critical
10.0
2007-08-15 CVE-2007-4367 Release of Invalid Pointer or Reference vulnerability in Opera Browser
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
network
opera CWE-763
critical
9.3
2007-07-21 CVE-2007-3929 Use After Free vulnerability in Opera Browser
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.
network
opera CWE-416
critical
9.3
2007-05-22 CVE-2007-2809 Classic Buffer Overflow vulnerability in Opera Browser
Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file.
network
opera CWE-120
critical
9.3
2007-01-09 CVE-2007-0127 Code Injection vulnerability in Opera Browser
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.
network
opera CWE-94
critical
9.3