iDefense Security Advisory 01.05.07 – Remote exploitation of a heap overflow in Opera Software ASA’s Opera Web browser could allow an attacker to execute arbitrary code in the security context of the current user. The vulnerability specifically exists due to Opera improperly processing a JPEG DHT marker. The DHT marker is used to define a Huffman Table which is used for decoding the image data. An invalid number of index bytes in the DHT marker will trigger a heap overflow with partially user controlled data. iDefense has confirmed the existence of this vulnerability in Opera version 9.02 on both Windows and Linux. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53484/01.05.07-2.txt
Source: https://packetstormsecurity.com/files/53484/iDEFENSE-Security-Advisory-2007-01-05.2.html