CVE-2007-2809

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-22 · updated 2026-06-16
Weakness: CWE-120

Description

Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file. NOTE: due to the lack of details, it is not clear if this is the same issue as CVE-2007-2274.

Affected products

Opera Browser: before 9.21 — fixed in 9.21

How to fix

Upgrade to a fixed version: Opera Browser 9.21. Check the vendor advisory for mitigations.

References

http://isc.sans.org/diary.html?storyid=2823
http://osvdb.org/36229
http://secunia.com/advisories/25278
http://securitytracker.com/id?1018089
http://www.opera.com/support/search/view/860/
http://www.securityfocus.com/bid/24080
http://www.vupen.com/english/advisories/2007/1888
https://exchange.xforce.ibmcloud.com/vulnerabilities/34470
http://isc.sans.org/diary.html?storyid=2823
http://osvdb.org/36229
http://secunia.com/advisories/25278
http://securitytracker.com/id?1018089

Get alerted when CVE-2007-2809 or the next vulnerability affects your stack