Risk: Medium
Two flaws recently discovered in Opera can enable malicious users to gain remote system access.
The first vulnerability, which was recently discovered in createSVGTransformFromMatrix Object Typecasting, can cause Opera to crash and enable arbitrary code execution.
The second flaw, an error arising when JPEG files are processed, can be exploited to cause a heap-based buffer overflow via a JPEG file with a specially crafted DHT marker. On its own, a malformed image will cause a system to crash; to exploit the flaw, the computer's memory must first be filled up with code of the attacker's choice. This is not easy to do properly, so attempted attacks will often cause crashes without successfully exploiting the flaw.