CVE-2007-4944

Opera Browser < 9.22 - Information Disclosure via Canvas Pattern Memory Leak

Title source: llm

Description

The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript.

References (6)

Core 6

Core References

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/linux/922/

Vendor Advisory x_refsource_confirm

http://www.opera.com/support/search/view/861/

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/solaris/922/

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/freebsd/922/

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/45946

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200708-17.xml

Scores

EPSS 0.0059

EPSS Percentile 69.4%

Details

Status published

Products (7)

opera/opera_browser 9.0 (3 CPE variants)

opera/opera_browser 9.01

opera/opera_browser 9.02

opera/opera_browser 9.10

opera/opera_browser 9.12

opera/opera_browser 9.20 (2 CPE variants)

opera/opera_browser 9.21

Published Sep 18, 2007

Tracked Since Feb 18, 2026