Launchpad.net

CVE 2007-4367

Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

See the CVE page on Mitre.org for more details.

References