Denial of Service in Opera 7.x

[bill]

article [secadministrator.com]

VERSIONS AFFECTED
Opera for Windows, versions 7.11b (build 2887), 7.11 (build 2880), 7.10 (build 2840), and 7.03 (build 2670)
DESCRIPTION
Five new unfixed bugs in Opera 7 for Windows Web browser can result in a Denial of Service (DoS) condition.

I came across this a few days ago and wondered if it would surface on WebmasterWorld, but I haven't seen anything yet...

It seems that Opera was told about these problems back on June 24, so I assume we can look forward to a fixed version any time now.

[ShawnR]

I'm sure Opera will get round to fixing these, but if I was the person assigning severities to bugs I would probably assign pretty low severities to those. True, they cause a pretty spectacular result, but they seem to be created by very artificial means. I'd guess it would be hard to find a website that actually has any of those sorts of constructs. Those constructs all seem to be engineered to confuse a browser, and not do anything useful on the site.

So my guess is that Opera will get round to fixing them, but I'm sure they have a many many bugs in their bug list, and I'd guess they'd be targetting others as higher priority. There are certainly bugs in Opera that really irritate me, that I'd like to see fixed as a higher priority than any of those.

Perhaps the bug report shown in the article minimalises the amount of code required to manifest the bug so much that I just don't get the implication. So if I am wrong, please set me straight, somebody.

Shawn ;)

[amznVibe]

Opera 7.20 beta 1 was just posted, the changelog might note if this is fixed (not available just yet but will be at this address most likely: [opera.com...]

opera 7.20 beta 1 [snapshot.opera.com...]