Some vulnerabilities have been reported in Opera, which can be exploited by malicious people to conduct cross-site scripting attacks or potentially to compromise a user's system.

1) Certain parameters passed to the "History Search" functionality are not properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which is executed in a user's browser session when the malicious data is being viewed.

Successful exploitation allows e.g. changing Opera's preferences, which can further be exploited to execute arbitrary commands.

This is related to vulnerability #1 in:
SA32299

2) An error exists in the handling of javascript URLs in the Links panel, which can be exploited to conduct cross-site scripting attacks with pages containing frames.

The vulnerabilities are reported in versions prior to 9.62.

Solution
Update to version 9.62 (see the vendor's advisory for details).

Provided and/or discovered by
1) Reported by Stefano Di Paola.
2) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Opera:
http://www.opera.com/support/search/view/906/
http://www.opera.com/support/search/view/907/

Aviv Raff:
http://aviv.raffon.net/2008/10/30/AdifferentOpera.asp

Deep Links
Links available to Secunia VIM customers