Image properties can be used to execute scripts

2008-12-16T00:00:00
ID OPERA:879
Type opera
Reporter Opera
Modified 2008-12-16T00:00:00

Description

Image properties can contain custom comments. When displaying the image properties, Opera can be tricked into treating the comments as script. This can cause the script to be run in the wrong security context.