CVE-2007-3929

CRITICAL 9.3CVE-2007-3929 · Published 21/07/2007 · updated 16/06/2026

In short

CVE-2007-3929 is a CRITICAL (CVSS 9.3) vulnerability affecting opera browser (opera).
Chance of exploitation in the next 30 days (EPSS): 6.5%, higher than 93.8% of all vulnerabilities.
Fix: update to 9.22 or later.

Package	Affected versions	Patched versions
opera browser opera	`< 9.22`	`9.22`

Description

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
secunia.com/advisories/26138 · Broken Link
secunia.com/advisories/26545 · Broken Link
security.gentoo.org/glsa/glsa-200708-17.xml · Third Party Advisory
novell.com/linux/security/advisories/2007_15_sr.html · Broken Link
opera.com/support/search/view/862 · Broken Link
securityfocus.com/bid/24970 · Broken Link
securitytracker.com/id · Broken Link
vupen.com/english/advisories/2007/2584 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/35509 · Third Party Advisory

More vulnerabilities in opera browser

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

opera browser

opera

< 9.22

9.22

More vulnerabilities in opera browser

See all →