Design/Logic Flaw

A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...

CVE-2007-1294

A certain ActiveX control in the DivXBrowserPlugin npdivx32.dll in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service Internet Explorer 7 crash via large values to DivxWP.Resize, related to resizing images...

DokuWiki fetch.php Multiple Parameter imconvert Function Arbitrary Command Execution

The remote host is running DokuWiki, an open source wiki application written in PHP. The installed version of DokuWiki fails to properly sanitize input to the 'w' and 'h' parameters of the 'lib/exe/fetch.php' script before using it to execute a command when resizing images. An unauthenticated...