CVE-2007-0429

Affected software: DivX Player 6.4.1 includes DivXBrowserPlugin (npdivx32.dll) used as an ActiveX control in Internet Explorer. Vulnerability: invoking the GoWindowed method on a certain ActiveX instance can trigger a denial-of-service condition, leading to IE7 crash. Root cause: improper handlin...

CVE-2006-6444

The CVE-2006-6444 issue affects Nostra DivX Player versions 2.1, 2.2.00.0 (and possibly earlier). It is caused by a stack-based buffer overflow triggered by a long string in an M3U file, which allows a remote attacker to execute arbitrary code. The vulnerability is exploitable remotely via crafte...

CVE-2008-0090

The CVE-2008-0090 issue affects DivX Player 6.6.0 through the ActiveX control npUpload.dll. The vulnerability is triggered in the SetPassword method by a long argument, leading to a denial of service (Internet Explorer 7 crash). The connected documents consistently describe this DoS scenario with...

CVE-2005-0304

CVE-2005-0304 describes a directory traversal in DivX Player 2.6 and earlier. A specially crafted ZIP file containing a skin allows a remote attacker to overwrite arbitrary files by using a .. in a filename, enabling possible partial availability impact as reflected in the CVSS score. The records...

CVE-2010-5231

CVE-2010-5231 describes an untrusted search path vulnerability in DivX Player 7.2.019 that allows local privilege escalation via a Trojan horse VersionCheckDLL.dll placed in the current working directory, demonstrated by a directory containing a .avi file. The root cause is an DLL search order is...

CVE-2008-1912

CVE-2008-1912 concerns a stack-based buffer overflow in DivX Player 6.7 (build 6.7.0.22 and earlier). The vulnerability allows a user-assisted remote attacker to crash the application or execute arbitrary code when processing a long subtitle in a .SRT file. Affected product is DivX Player; root c...