Description
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.
References
- 20081217 n.runs-SA-2008.010 - Opera HTML parsing Code Execution mailing-list
- http://www.opera.com/docs/changelogs/linux/963/
- 4791 third-party-advisory
- 1021460 vdb-entry
- http://www.opera.com/support/kb/view/921/
- 34294 third-party-advisory
- http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php
- GLSA-200903-30 vendor-advisory