All the latest UK technology news, reviews and analysis

'Critical' BitTorrent flaw hits Opera

by Matt Chapman

20 Jul 2007

Be the first to comment

  • Tweet this
Opera web browser
A flaw in Opera could be exploited to execute arbitrary code

A 'highly critical' vulnerability has been found in the Opera web browser which could be exploited to remotely compromise a user's system. 

The flaw is caused when Opera uses already freed memory to parse BitTorrent headers, and can lead to an invalid object pointer being de-referenced. 

This can be exploited to execute arbitrary code if the user is tricked into clicking on a specially-crafted BitTorrent file and then removes it from the download pane by right-clicking.

The vulnerability is reported in version 9.21 of Opera on Windows, but security monitoring website Secunia, which rated the flaw 'highly critical', said that other versions may also be affected. 

The problem can be fixed by upgrading to Opera 9.22.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

Flame virus poll

Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?

31%

1%

12%

56%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Symanteccloud

Social networking: a guide for IT managers

Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them

Riverbed

Mitigating the risks of IT change

The importance of understanding your infrastructure

Test Architect

Are you looking for a new positing within the Testing...

B2B Marketing Executive

A leading global provider of critical information to...

Scrum Master

Want to work for one of the most dynamic, creative environments...

Interactive & Mobile QA Engineer

Want to work for one of the most dynamic, creative environments...

To send to more than one email address, simply separate each address with a comma.