CVE-2007-4367

Name: CVE-2007-4367
Creator: NVD / NIST
Published: 2007-08-15T23:17:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 8.25%

Last modified Jun 16, 2026

CVE-2007-4367 is a vulnerability of currently unknown severity. Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer.". EPSS estimates a 8.25% chance of exploitation in the next 30 days.

Description

Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

Metrics

EPSS Probability

8.25%

94.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-763

Affected Software

Vendor	Product	Versions
Opera	Opera Browser	< 9.23

References

http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.htmlThird Party Advisory
http://secunia.com/advisories/26477Broken Link, Patch
http://secunia.com/advisories/26545Broken Link
http://secunia.com/advisories/26635Broken Link
http://security.gentoo.org/glsa/glsa-200708-17.xmlThird Party Advisory
http://www.opera.com/support/search/view/865/Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/25331Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018572Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/2904Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36039Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.htmlThird Party Advisory
http://secunia.com/advisories/26477Broken Link, Patch
http://secunia.com/advisories/26545Broken Link
http://secunia.com/advisories/26635Broken Link
http://security.gentoo.org/glsa/glsa-200708-17.xmlThird Party Advisory
http://www.opera.com/support/search/view/865/Broken Link, Vendor Advisory
http://www.securityfocus.com/bid/25331Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018572Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/2904Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36039Third Party Advisory, VDB Entry

Timeline

Published: Aug 15, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-4367?

Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

How severe is CVE-2007-4367?

Severity scoring for CVE-2007-4367 is pending analysis. The EPSS model estimates a 8.25% probability of exploitation in the next 30 days.

How do I fix CVE-2007-4367?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-4367?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST