160 matches found
DivX Web Player Version Detection
This script detects the version of DivX Web Player. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
DivX Web Player 'STRF'块处理远程缓冲区溢出漏洞
BUGTRAQ ID: 34523 CVE ID:CVE-2008-5259 CNCVE ID:CNCVE-20085259 DivX Web Player用于在线播放DivX视频的应用程序。 DivX Web Player处理"STRF" Stream Format块存在错误,远程攻击者可以利用漏洞以应用程序安全上下文执行任意指令。 通过提交特殊构建的DivX文件,诱使用户访问,可导致处理"STRF" Stream Format块时存在符号错误而触发基于堆的缓冲区溢出,可能以应用程序权限执行任意指令。 DivX Inc. DivX Web Player 1.4.2 升级到DivX We...
Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow
====================================================================== Secunia Research 15/04/2009 - DivX Web Player Stream Format Chunk Buffer Overflow - ====================================================================== Table of Contents Affected...
DivX WebPlayer buffer overflow
Integer overflow on video stream chunk parsing leads to buffer overflow...
DivX Web Player < 1.4.3.4 Stream Format Chunk Buffer Overflow
DivX Web Player, which allows for playing HD-quality DivX video in a web browser, is installed on the remote host. The installed version contains a heap-based buffer overflow that is triggered when processing 'STRF' Stream Format chunks. Using a specially crafted DivX file, an attacker may be abl...
CVE-2008-5259
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
Integer overflow
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
CVE-2008-5259
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
CVE-2008-5259
DivX Web Player contains a heap-based buffer overflow in STRF (Stream Format) chunk processing due to an integer signedness error. A crafted DivX file can trigger code execution on remote hosts running vulnerable DivX Web Player versions such as 1.4.2.7 (and possibly earlier). Public sources attr...
DivX Web Player STRF块处理堆溢出漏洞
BUGTRAQ ID: 34523 CVECAN ID: CVE-2008-5259 DivX Web Player是一个浏览器插件,允许在浏览器中直接播放在线DivX视频。 DivX Web Player在解析DivX媒体文件中的STRF(Stream Format)块时存在符号错误,如果用户受骗访问了恶意网站并播放了畸形的媒体文件的话,就可以触发堆溢出,导致执行任意代码。 DivX Web Player 1.4.2.7 DivX ---- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.divx.com/...
KLA10137 ACE vulnerability in DivX Web Player
An integer signing error was found in DivX Web Player. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DivX file. Original advisories - Exploitation Related products DivX-Web-Player CVE list...
CVE-2008-5259: Undefined Security Weakness
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format STRF chunk, which triggers a heap-based buffer overflow...
FTP Server .divx file Detection
Binary data 4992.prm...
Policy - .divx File Detection
Binary data 4989.prm...
DivX Player 6.7 - .srt File Subtitle Parsing Buffer Overflow
DivX Player 6.7 - .srt File Subtitle Parsing Buffer Overflow // Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog f...
divx-Exploit.cpp.txt
// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....
DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ================================================================= DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit ================================================================= // Exploit.cpp : Defines the entry point fo...
DivX Player 6.7 SRT File Subtitle Parsing Buffer Overflow Exploit
No description provided by source. // Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0...
DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow
// Exploit.cpp : Defines the entry point for the console application. // include "stdafx.h" / DivX Player =6.7 srt subtitle parsing exploit Coded by [email protected] Tested on Windows XP SP2 + DivX Player 6.7.0 Credit to securfrog for his PoC Actually this exploit is not relevant to DivX 6.6....
Stack overflow
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a long subtitle in a .SRT file...