CVE-2007-3929

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-21 · updated 2026-06-16
Weakness: CWE-416

Description

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

Affected products

Opera Browser: before 9.22 — fixed in 9.22

How to fix

Upgrade to a fixed version: Opera Browser 9.22. Check the vendor advisory for mitigations.

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=564
http://secunia.com/advisories/26138
http://secunia.com/advisories/26545
http://security.gentoo.org/glsa/glsa-200708-17.xml
http://www.novell.com/linux/security/advisories/2007_15_sr.html
http://www.opera.com/support/search/view/862/
http://www.securityfocus.com/bid/24970
http://www.securitytracker.com/id?1018431
http://www.vupen.com/english/advisories/2007/2584
https://exchange.xforce.ibmcloud.com/vulnerabilities/35509
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=564
http://secunia.com/advisories/26138

Get alerted when CVE-2007-3929 or the next vulnerability affects your stack