CVE-2007-2274: opera opera_browser

Vulnerability summary

CVE-2007-2274 is a high (CVSS 7.8) vulnerability in opera opera_browser. EPSS estimates a 8.20% chance of exploitation in the next 30 days, higher than 94.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 25-04-2007
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain.

• CWE-401Missing Release of Memory after Effective LifetimeThe product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.