Opera Browser "Content-Length" Header Buffer Overflow Vulnerability

http://www.vupen.com/english/advisories/2010/0529

A vulnerability has been identified in Opera, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing malformed HTTP "Content-Length:" headers, which could be exploited by remote attackers to crash an affected browser or execute arbitrary code by tricking a user into visiting a web page hosted on a malicious web server.

VUPEN confirmed the vulnerability with Opera version 10.50 on Windows XP SP3.