Nostra DivX Player M3U超长播放列表缓冲区溢出漏洞

Nostra Divx Player提供了优质的DivX影片播放功能。 Nostra DivX Player在加载包含有超长字符串（大于33200字节）的M3U播放列表文件时存在栈溢出漏洞，可能允许攻击者远程执行任意指令。 Nostra Nostra DivX Player 2.2.00.0 Nostra Nostra DivX Player 2.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nostradivx.com/...

CVE-2005-0304

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in a filename in a ZIP file for a skin...

CVE-2005-0304

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in a filename in a ZIP file for a skin...

CVE-2005-0304

CVE-2005-0304 describes a directory traversal in DivX Player 2.6 and earlier. A specially crafted ZIP file containing a skin allows a remote attacker to overwrite arbitrary files by using a .. in a filename, enabling possible partial availability impact as reflected in the CVSS score. The records...

DivX Player skin files directory traversal

During installation of DivX skin file it's possible ot overwrite any files in any location...

[Full-Disclosure] Arbitrary files overwriting through skins in DivX Player 2.6

Luigi Auriemma Application: DivX Player http://www.divx.com/divx/player/ Versions: = 2.6 Platforms: Windows Bug: arbitrary files overwriting through skins Exploitation: local or remote through browser Date: 21 Jan 2005 Author: Luigi Auriemma e-mail: [email protected] web:...

DivX Player 2.6 - .Skin File Directory Traversal

DivX Player 2.6 - .Skin File Directory Traversal source: https://www.securityfocus.com/bid/12332/info DivX Player is reported prone to a directory traversal vulnerability. The issue presents itself when DPS '.dps', archive files are processed. Ultimately an attacker may exploit this issue to save...

DivX Player 2.6 - '.Skin' File Directory Traversal

source: https://www.securityfocus.com/bid/12332/info DivX Player is reported prone to a directory traversal vulnerability. The issue presents itself when DPS '.dps', archive files are processed. Ultimately an attacker may exploit this issue to save a script or executable file in an arbitrary...