Description
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.
References
- 24970 vdb-entry
- http://www.opera.com/support/search/view/862/
- opera-bittorrent-code-execution(35509) vdb-entry
- 1018431 vdb-entry
- GLSA-200708-17 vendor-advisory
- 26138 third-party-advisory
- ADV-2007-2584 vdb-entry
- 26545 third-party-advisory
- 20070719 Opera Software Opera Web Browser BitTorrent Dangling Pointer Vulnerability third-party-advisory
- SUSE-SR:2007:015 vendor-advisory