An error in a routine in Opera's Java class libraries (Windows version) can be exploited by a malicious Java-Applet to cause a DoS (Denial of Service).

The vulnerability can be exploited by constructing a Java-Applet calling the "showDocument" method in the "PluginContext" object with an URL object containing a very long string. This results in an errornous JNI call (Java Native Interface), which crashes the Java VM also crashing Opera.

It has not been proved whether this vulnerability can be exploited to execute arbitrary code on a user's system.

Solution
Disable Java support until Opera Software releases a new version or filter applets in a proxy.

Provided and/or discovered by
Marc Schoenefeld

Original Advisory
http://www.illegalaccess.org/java/OperaCall2.html

Deep Links
Links available to Secunia VIM customers