CVE-2008-0090

The CVE-2008-0090 issue affects DivX Player 6.6.0 through the ActiveX control npUpload.dll. The vulnerability is triggered in the SetPassword method by a long argument, leading to a denial of service (Internet Explorer 7 crash). The connected documents consistently describe this DoS scenario with...

CVE-2008-0090

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long argument to the SetPassword method...

DivX Player 6.6.0 - ActiveX SetPassword() Denial of Service (PoC)

DivX Player 6.6.0 - ActiveX SetPassword Denial of Service PoC function crash var buff = ''; fori=0;i DivX SetPassword npUpload.dll Denial of Service Tested on IE 7 and Divx Player 6.6.0 Registers: EAX 00000000 ECX FFFFFFFF EDX 0191CA50 EBX 008E06E0 ESP 0191C9E4 EBP 0191CA50 ESI 00000000 EDI...

DivX Player 6.6.0 - ActiveX 'SetPassword()' Denial of Service (PoC)

function crash var buff = ''; fori=0;i DivX SetPassword npUpload.dll Denial of Service Tested on IE 7 and Divx Player 6.6.0 Registers: EAX 00000000 ECX FFFFFFFF EDX 0191CA50 EBX 008E06E0 ESP 0191C9E4 EBP 0191CA50 ESI 00000000 EDI 00000000 EIP 061F2B52 npUpload.061F2B52 Access violation when readi...