DivX Player 6.6.0 - .srt File Buffer Overflow (SEH)

DivX Player 6.6.0 - .srt File Buffer Overflow SEH !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com...

DivX Player 6.6.0 - '.srt' File Buffer Overflow (SEH)

!/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Mati Aharoni, aka muts and Chris Hadnagy, aka loganWHD muts..at..offensive-security...dot..com chris..at..offensive-security...dot..com http://www.offensive-security.com/0day/divx66.py.txt Notes: Unicode buffer - real pita...

DivX Player <= 6.7.0 SRT File Buffer Overflow PoC

No description provided by source. DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted: Replace MOVIEFILENAME by your movie filename .avi ...

DivX Player .SRT文件字幕解析缓冲区溢出漏洞

BUGTRAQ ID: 28799 DivX Player是一款Windows下的DivX文件播放器。 DivX播放器在解析带有超长字幕的字幕文件（.SRT）时存在缓冲区溢出，如果用户受骗加载了恶意字幕的话就会触发这个溢出，导致播放器崩溃。 DivX DivX Player = 6.7.0 DivX ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.divx.com/ DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitl...

divx-dos.txt

DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n";...

DivX Player buffer overflow

Buffer overflow on .SRT subtitile files parsing...

DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT )

DIVX Player = 6.7.0 Buffer Overflow PoC .SRT Bug: When parsing a subtitle file with an overly long subtitle DIVX player will deadly crash with eip overwritted Replace MOVIEFILENAME by your movie filename .avi !/usr/local/bin/perl my $file="MOVIEFILENAME.srt"; my $payload = "A" x 4096; open $file,...

DivX Player <= 6.7.0 SRT File Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================= DivX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; 0day.today...

DivX Player 6.7.0 - .srt File Buffer Overflow (PoC)

DivX Player 6.7.0 - .srt File Buffer Overflow PoC DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; milw0rm.com 2008-04-15...

DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)

DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; milw0rm.com 2008-04-15...

Stack overflow

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long argument to the SetPassword method...

CVE-2008-0090

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long argument to the SetPassword method...

CVE-2008-0090

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long argument to the SetPassword method...

CVE-2008-0090

The CVE-2008-0090 issue affects DivX Player 6.6.0 through the ActiveX control npUpload.dll. The vulnerability is triggered in the SetPassword method by a long argument, leading to a denial of service (Internet Explorer 7 crash). The connected documents consistently describe this DoS scenario with...

CVE-2008-0090: Improper Restriction of Operations within the Bounds of a Memory Buffer

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long argument to the SetPassword method...

DivX Player 6.6.0 ActiveX SetPassword() Denial of Service PoC

Exploit for unknown platform in category dos / poc ============================================================= DivX Player 6.6.0 ActiveX SetPassword Denial of Service PoC ============================================================= function crash var buff = ''; fori=0;i DivX SetPassword...

DivX Player 6.6.0 - ActiveX SetPassword() Denial of Service (PoC)

DivX Player 6.6.0 - ActiveX SetPassword Denial of Service PoC function crash var buff = ''; fori=0;i DivX SetPassword npUpload.dll Denial of Service Tested on IE 7 and Divx Player 6.6.0 Registers: EAX 00000000 ECX FFFFFFFF EDX 0191CA50 EBX 008E06E0 ESP 0191C9E4 EBP 0191CA50 ESI 00000000 EDI...

DivX Player 6.6.0 - ActiveX 'SetPassword()' Denial of Service (PoC)

function crash var buff = ''; fori=0;i DivX SetPassword npUpload.dll Denial of Service Tested on IE 7 and Divx Player 6.6.0 Registers: EAX 00000000 ECX FFFFFFFF EDX 0191CA50 EBX 008E06E0 ESP 0191C9E4 EBP 0191CA50 ESI 00000000 EDI 00000000 EIP 061F2B52 npUpload.061F2B52 Access violation when readi...

CVE-2007-1294: Undefined Security Weakness

A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...

CVE-2007-0429

DivXBrowserPlugin aka DivX Web Player npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of service Internet Explorer 7 crash by invoking the GoWindowed method for a certain instance of the ActiveX object...