Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a \content: url(0);\ style attribute a \bodyA\ tag a long string and a \u\ tag with a long attribute as demonstrated by opera.html; and (2) a BGSOUND element with a \margin:-99;\ STYLE attribute.