CVE-2007-4367: opera opera_browser Release of Invalid Pointer or Reference

EPSS trend

Probability

8.73%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

+0.48 pp

From 8.25% on 19-09-2026

19-09-202619-10-2026

EPSS score

8.73%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

10 links

www.securitytracker.com/id?1018572VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.vupen.com/english/advisories/2007/2904VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/26635Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.opera.com/support/search/view/865/X Refsource CONFIRMBroken LinkVendor Advisory
security.gentoo.org/glsa/glsa-200708-17.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/36039VDB EntryX Refsource XFThird Party Advisory
www.securityfocus.com/bid/25331VDB EntryX Refsource BIDBroken LinkExploitThird Party Advisory
secunia.com/advisories/26545Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/26477Third Party AdvisoryX Refsource SECUNIABroken LinkPatch

Related vulnerabilities

CVE-2018-18913operaopera_browser0.40%7y ago21-03-2019 21:06Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.CVE-2018-6608operaopera_browser3.24%8y ago28-03-2018 21:00In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.CVE-2013-1637operaopera_browser4.59%13y ago08-02-2013 11:00Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.CVE-2013-1638operaopera_browser8.04%13y ago08-02-2013 11:00Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.CVE-2013-1618operaopera_browser2.16%13y ago08-02-2013 19:00The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.CVE-2013-1639operaopera_browser0.49%13y ago08-02-2013 11:00Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.

All vulnerabilities inopera_browser

CVE-2007-4367: opera opera_browser Release of Invalid Pointer or Reference

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References