Lucene search
RootSSV:5074HistoryApr 21, 2009 - 12:00 a.m.
DivX Web Player 'STRF'块处理远程缓冲区溢出漏洞
2009-04-2100:00:00
Root
www.seebug.org
9
0.081 Low
EPSS
Percentile
93.7%
BUGTRAQ ID: 34523
CVE ID：CVE-2008-5259
CNCVE ID：CNCVE-20085259
DivX Web Player用于在线播放DivX视频的应用程序。
DivX Web Player处理"STRF" (Stream Format)块存在错误，远程攻击者可以利用漏洞以应用程序安全上下文执行任意指令。
通过提交特殊构建的DivX文件，诱使用户访问，可导致处理"STRF" (Stream Format)块时存在符号错误而触发基于堆的缓冲区溢出，可能以应用程序权限执行任意指令。
DivX Inc. DivX Web Player 1.4.2
升级到DivX Web Player 1.4.3.4：
<a href=“http://www.divx.com/divx/webplayer/” target=“_blank”>http://www.divx.com/divx/webplayer/</a>
Related
securityvulns
securityvulns
DivX WebPlayer buffer overflow
2009-04-17 00:00:00
Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow
2009-04-17 00:00:00
kaspersky
kaspersky
KLA10137 ACE vulnerability in DivX Web Player
2009-04-16 00:00:00
nessus
nessus
DivX Web Player < 1.4.3.4 Stream Format Chunk Buffer Overflow
2009-04-17 00:00:00
prion
prion
Integer overflow
2009-04-16 15:12:00
seebug
seebug
DivX Web Player STRF块处理堆溢出漏洞
2009-04-16 00:00:00
cve
cve
CVE-2008-5259
2009-04-16 15:12:00
openvas
openvas
DivX Web Player Buffer Overflow Vulnerability
2009-04-23 00:00:00
DivX Web Player Buffer Overflow Vulnerability
2009-04-23 00:00:00
Ubuntu USN-757-1 (gs-gpl)
2009-04-20 00:00:00
cvelist
cvelist
CVE-2008-5259
2009-04-16 15:00:00