Opera before 11.11 does not properly handle destruction of a Silverlight instance which allows remote attackers to cause a denial of service (application crash) via a web page as demonstrated by vod.onet.pl.