CVE-2007-4367 — Release of Invalid Pointer or Reference in Browser
Severity
9.3CRITICALNVD
EPSS
7.6%
top 8.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 15
Latest updateMay 1
Description
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
CVSS vector
AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0