Multiple vulnerabilities have been reported in Opera, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system.

1) An error when handling certain DOM elements can be exploited to bypass the HTML sanitizer and conduct cross-site scripting attacks.

2) An error when handling certain HTML characters can be exploited to bypass the HTML sanitizer and conduct cross-site scripting attacks.

3) An error when displaying the download dialog box within a small window can be exploited to download and execute a file by tricking a user into entering a specific keyboard sequence.

The vulnerabilities are reported in versions prior to 12.01 and 11.66 (Mac OS X only).

Solution
Update to version 12.01 or 11.66 (Mac OS X only).

Provided and/or discovered by
1, 2) Reported by the vendor
3) The vendor credits Jordi Chancel

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.opera.com/support/kb/view/1025/
http://www.opera.com/support/kb/view/1026/
http://www.opera.com/support/kb/view/1027/

Deep Links
Links available to Secunia VIM customers