What’s Vulnerable › Vulnerabilities

CVE-2007-4944

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-09-18 · updated 2026-06-16

Description

The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript.

Affected products

• Opera Browser: 9.0, 9.0-beta1, 9.0-beta2, 9.01, 9.02, 9.10 (+4)

References

• http://osvdb.org/45946
• http://security.gentoo.org/glsa/glsa-200708-17.xml
• http://www.opera.com/docs/changelogs/freebsd/922/
• http://www.opera.com/docs/changelogs/linux/922/
• http://www.opera.com/docs/changelogs/solaris/922/
• http://www.opera.com/support/search/view/861/
• http://osvdb.org/45946
• http://security.gentoo.org/glsa/glsa-200708-17.xml
• http://www.opera.com/docs/changelogs/freebsd/922/
• http://www.opera.com/docs/changelogs/linux/922/
• http://www.opera.com/docs/changelogs/solaris/922/
• http://www.opera.com/support/search/view/861/

Get alerted when CVE-2007-4944 or the next vulnerability affects your stack