Opera versions 7.22 and below allow for a remote site to overwrite local files during temporary file creation due to a lack of sanitizing filenames.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32415/opera07autodel.txt
Source: https://packetstormsecurity.com/files/32415/opera07autodel.txt.html