Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a content: url(0); style attribute, a bodyA tag, a long string, and a u tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a margin:-99; STYLE attribute.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Opera_browser | Opera | * | 8.02 (including) |