CVE-2007-6524: Opera Browser

High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.

Affected products

• Opera Opera Browser: up to and including 9.24; version 5.0 only; version 5.02 only; version 5.10 only; version 5.11 only; version 5.12 only; …

Published 2007-12-24. Last modified 2026-06-16.