149 matches found
Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow
====================================================================== Secunia Research 15/04/2009 - DivX Web Player Stream Format Chunk Buffer Overflow - ====================================================================== Table of Contents Affected...
DivX Web Player < 1.4.3.4 Stream Format Chunk Buffer Overflow
DivX Web Player, which allows for playing HD-quality DivX video in a web browser, is installed on the remote host. The installed version contains a heap-based buffer overflow that is triggered when processing 'STRF' Stream Format chunks. Using a specially crafted DivX file, an attacker may be abl...
CVE-2008-5259
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
Integer overflow
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
CVE-2008-5259
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
CVE-2008-5259
DivX Web Player contains a heap-based buffer overflow in STRF (Stream Format) chunk processing due to an integer signedness error. A crafted DivX file can trigger code execution on remote hosts running vulnerable DivX Web Player versions such as 1.4.2.7 (and possibly earlier). Public sources attr...
DivX Web Player STRF块处理堆溢出漏洞
BUGTRAQ ID: 34523 CVECAN ID: CVE-2008-5259 DivX Web Player是一个浏览器插件，允许在浏览器中直接播放在线DivX视频。 DivX Web Player在解析DivX媒体文件中的STRF（Stream Format）块时存在符号错误，如果用户受骗访问了恶意网站并播放了畸形的媒体文件的话，就可以触发堆溢出，导致执行任意代码。 DivX Web Player 1.4.2.7 DivX ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.divx.com/...
KLA10137 ACE vulnerability in DivX Web Player
An integer signing error was found in DivX Web Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DivX file. Original advisories - Related products DivX-Web-Player CVE list CVE-2008-5259 critic...
Design/Logic Flaw
A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...
CVE-2007-1294
A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...
CVE-2007-1294
The CVE-2007-1294 issue affects the DivX Web Player’s DivXBrowserPlugin (npdivx32.dll) shipped with DivX Player 1.3.0. The vulnerability allows remote attackers to trigger a denial-of-service via oversized values passed to DivxWP.Resize, related to image resizing, causing Internet Explorer 7 to c...
DivX Web Player 1.3.0 (npdivx32.dll) Remote Denial of Service Exploit
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- DivX Web Player 1.3.0 npdivx32.dll "Resize" method Denial of Service url: http://www.divx.com/...
DovX Web Player ActiveX DoS
Crash on large 'resize' method values...
DivX Web Player 1.3.0 (npdivx32.dll) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================================== DivX Web Player 1.3.0 npdivx32.dll Remote Denial of Service Exploit =====================================================================...
DivX Web Player 1.3.0 - npdivx32.dll Remote Denial of Service
DivX Web Player 1.3.0 - npdivx32.dll Remote Denial of Service ----------------------------------------------------------------------------- DivX Web Player 1.3.0 npdivx32.dll "Resize" method Denial of Service url: http://www.divx.com/ author: shinnai mail: shinnaiatautisticidotorg site:...
DivX Web Player 1.3.0 - 'npdivx32.dll' Remote Denial of Service
----------------------------------------------------------------------------- DivX Web Player 1.3.0 npdivx32.dll "Resize" method Denial of Service url: http://www.divx.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 all...
DivX Web Player NPDIVX32.DLL ActiveX控件远程拒绝服务漏洞
DivX Web Player是一款适用于多浏览器的插件。 DivX Web Player NPDIVX32.DLL ActiveX控件不正确处理参数数据，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于NPDIVX32.DLL ActiveX控件对用户提交的参数缺少过滤，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃： html OBJECT id=DivXBrowserPlugin style="LEFT: 0px; WIDTH: 1px; TOP: 0px; HEIGHT: 1px" height=1 width=1...
CVE-2007-0429
Affected software: DivX Player 6.4.1 includes DivXBrowserPlugin (npdivx32.dll) used as an ActiveX control in Internet Explorer. Vulnerability: invoking the GoWindowed method on a certain ActiveX instance can trigger a denial-of-service condition, leading to IE7 crash. Root cause: improper handlin...