The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.
2007-01-09T02:28:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 9.3 (HIGH)
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | opera | opera_browser | ≤ 9.02 | Yes |
| Application | opera | opera_browser | 1.00 | Yes |
| Application | opera | opera_browser | 2.00 | Yes |
| Application | opera | opera_browser | 2.10 | Yes |
| Application | opera | opera_browser | 2.10 | Yes |
| Application | opera | opera_browser | 2.10 | Yes |
| Application | opera | opera_browser | 2.10 | Yes |
| Application | opera | opera_browser | 2.12 | Yes |
| Application | opera | opera_browser | 3.00 | Yes |
| Application | opera | opera_browser | 3.00 | Yes |
| Application | opera | opera_browser | 3.10 | Yes |
| Application | opera | opera_browser | 3.21 | Yes |
| Application | opera | opera_browser | 3.50 | Yes |
| Application | opera | opera_browser | 3.51 | Yes |
| Application | opera | opera_browser | 3.60 | Yes |
| Application | opera | opera_browser | 3.61 | Yes |
| Application | opera | opera_browser | 3.62 | Yes |
| Application | opera | opera_browser | 3.62 | Yes |
| Application | opera | opera_browser | 4.00 | Yes |
| Application | opera | opera_browser | 4.00 | Yes |
| Application | opera | opera_browser | 4.00 | Yes |
| Application | opera | opera_browser | 4.00 | Yes |
| Application | opera | opera_browser | 4.00 | Yes |
| Application | opera | opera_browser | 4.00 | Yes |
| Application | opera | opera_browser | 4.01 | Yes |
| Application | opera | opera_browser | 4.02 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.02 | Yes |
| Application | opera | opera_browser | 5.10 | Yes |
| Application | opera | opera_browser | 5.11 | Yes |
| Application | opera | opera_browser | 5.12 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.1 | Yes |
| Application | opera | opera_browser | 6.01 | Yes |
| Application | opera | opera_browser | 6.1 | Yes |
| Application | opera | opera_browser | 6.02 | Yes |
| Application | opera | opera_browser | 6.03 | Yes |
| Application | opera | opera_browser | 6.04 | Yes |
| Application | opera | opera_browser | 6.05 | Yes |
| Application | opera | opera_browser | 6.06 | Yes |
| Application | opera | opera_browser | 6.11 | Yes |
| Application | opera | opera_browser | 6.12 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.01 | Yes |
| Application | opera | opera_browser | 7.02 | Yes |
| Application | opera | opera_browser | 7.03 | Yes |
| Application | opera | opera_browser | 7.10 | Yes |
| Application | opera | opera_browser | 7.10 | Yes |
| Application | opera | opera_browser | 7.11 | Yes |
| Application | opera | opera_browser | 7.11 | Yes |
| Application | opera | opera_browser | 7.20 | Yes |
| Application | opera | opera_browser | 7.20 | Yes |
| Application | opera | opera_browser | 7.21 | Yes |
| Application | opera | opera_browser | 7.22 | Yes |
| Application | opera | opera_browser | 7.23 | Yes |
| Application | opera | opera_browser | 7.50 | Yes |
| Application | opera | opera_browser | 7.50 | Yes |
| Application | opera | opera_browser | 7.51 | Yes |
| Application | opera | opera_browser | 7.52 | Yes |
| Application | opera | opera_browser | 7.53 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.60 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.01 | Yes |
| Application | opera | opera_browser | 8.02 | Yes |
| Application | opera | opera_browser | 8.50 | Yes |
| Application | opera | opera_browser | 8.51 | Yes |
| Application | opera | opera_browser | 8.52 | Yes |
| Application | opera | opera_browser | 8.53 | Yes |
| Application | opera | opera_browser | 8.54 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.01 | Yes |