CVE-2008-1081
No fix known EPSS 3%
Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.
Products: opera_browser