Opera Browser "Content-Length" Header Buffer Overflow Vulnerability
Description
A vulnerability has been identified in Opera, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing malformed HTTP "Content-Length:" headers, which could be exploited by remote attackers to crash an affected browser or execute arbitrary code by tricking a user into visiting a web page hosted on a malicious web server.
VUPEN confirmed the vulnerability with Opera version 10.50 on Windows XP SP3.
An error related to the processing of certain XSLT constructs could allow a malicious web page to retrieve contents from arbitrary web sites.
Vulnerable Products
Vulnerable Software: Opera version 10.50 and prior
