External news readers and e-mail clients can be used to execute arbitrary code – Opera Security Advisories

External news readers and e-mail clients can be used to execute arbitrary code.

Severity: Highly Severe

Affected Versions

All versions of Opera for Desktop prior to Opera 9.24.

Problem Description

 

If a user has configured Opera to use an external newsgroup client or e-mail application, specially crafted Web pages can cause Opera to run that application incorrectly. In some cases this can lead to execution of arbitrary code.

 

Opera’s Response

 

Opera Software has released Opera 9.24, where this issue has been fixed.

 

Credits

Thanks to Michael A. Puls II for reporting this issue to Opera Software.