Lucene search

K
kasperskyKaspersky LabKLA10137
HistoryApr 16, 2009 - 12:00 a.m.

KLA10137 ACE vulnerability in DivX Web Player

2009-04-1600:00:00
Kaspersky Lab
threats.kaspersky.com
47

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.081 Low

EPSS

Percentile

94.2%

Detect date:

04/16/2009

Severity:

Critical

Description:

An integer signing error was found in DivX Web Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DivX file.

Affected products:

DivX Web Player versions 1.4.2.7 and earlier

Solution:

Update to latest version

Impacts:

ACE

Related products:

DivX Web Player

CVE-IDS:

CVE-2008-52599.3Critical

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.081 Low

EPSS

Percentile

94.2%