Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
https://exchange.xforce.ibmcloud.com/vulnerabilities/36039
http://security.gentoo.org/glsa/glsa-200708-17.xml
http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.html