CVE-2007-6524

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.

• CWE-200

• http://bugs.gentoo.org/show_bug.cgi?id=202770
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html
• http://osvdb.org/42691
• http://secunia.com/advisories/28169Patch, Vendor Advisory
• http://secunia.com/advisories/28290Vendor Advisory
• http://secunia.com/advisories/28314Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200712-22.xml
• http://securitytracker.com/id?1019435
• http://www.opera.com/docs/changelogs/linux/925/
• http://www.opera.com/docs/changelogs/windows/925/Patch
• http://www.opera.com/support/search/view/876/
• http://www.securityfocus.com/archive/1/488264/100/0/threaded
• http://www.securityfocus.com/bid/26937
• http://www.securitytracker.com/id?1019131
• http://www.vupen.com/english/advisories/2007/4261Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=408076
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39163
• http://bugs.gentoo.org/show_bug.cgi?id=202770
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html
• http://osvdb.org/42691
• http://secunia.com/advisories/28169Patch, Vendor Advisory
• http://secunia.com/advisories/28290Vendor Advisory
• http://secunia.com/advisories/28314Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200712-22.xml
• http://securitytracker.com/id?1019435
• http://www.opera.com/docs/changelogs/linux/925/
• http://www.opera.com/docs/changelogs/windows/925/Patch
• http://www.opera.com/support/search/view/876/
• http://www.securityfocus.com/archive/1/488264/100/0/threaded
• http://www.securityfocus.com/bid/26937
• http://www.securitytracker.com/id?1019131
• http://www.vupen.com/english/advisories/2007/4261Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=408076
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39163

Published

Dec 24, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6518Multiple SQL injection vulnerabilities in search.php in Wolt…
• CVE-2007-6519Unspecified vulnerability in the File-on-File Mounting File …
• CVE-2007-6520Opera before 9.25 allows remote attackers to conduct cross-d…
• CVE-2007-6521Unspecified vulnerability in Opera before 9.25 allows remote…
• CVE-2007-6522The rich text editing functionality in Opera before 9.25 all…
• CVE-2007-6523Algorithmic complexity vulnerability in Opera 9.50 beta and …
• CVE-2007-6525Unspecified vulnerability in eClient in IBM DB2 Content Mana…
• CVE-2007-6526Cross-site scripting (XSS) vulnerability in tiki-special_cha…
• CVE-2007-6527uploadimg.php in the Automatic Image Upload with Thumbnails …
• CVE-2007-6528Directory traversal vulnerability in tiki-listmovies.php in …
• CVE-2007-6529Multiple unspecified vulnerabilities in TikiWiki before 1.9.…
• CVE-2007-6530Buffer overflow in the XUpload.ocx ActiveX control in Persit…