CVE-2007-3929: opera opera_browser Use After Free

CVSS: 9.3v2.0HighModified

Published 21-07-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-3929 is a high (CVSS 9.3) Use After Free vulnerability in opera opera_browser. EPSS estimates a 6.47% chance of exploitation in the next 30 days, higher than 93.6% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

6.47%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

21-07-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

6.47%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.47% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Opera1 product

opera_browser< 9.22

1 vendor · 1 product

References

10 links

www.securityfocus.com/bid/24970VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.opera.com/support/search/view/862/X Refsource CONFIRMBroken LinkPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35509VDB EntryX Refsource XFThird Party Advisory
www.securitytracker.com/id?1018431VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
security.gentoo.org/glsa/glsa-200708-17.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/26138Third Party AdvisoryX Refsource SECUNIABroken LinkPatch
www.vupen.com/english/advisories/2007/2584VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/26545Third Party AdvisoryX Refsource SECUNIABroken Link
labs.idefense.com/intelligence/vulnerabilities/display.php?id=564Third Party AdvisoryX Refsource IDEFENSEBroken LinkVendor Advisory
www.novell.com/linux/security/advisories/2007_15_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities