CVE-2008-5259

Related Files

DivX Web Player Stream Format Chunk Buffer Overflow

Posted Apr 15, 2009

Authored by Alin Rad Pop | Site secunia.com

Secunia Research has discovered a vulnerability in DivX Web Player, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a signedness error in the processing of "STRF" (Stream Format) chunks. This can be exploited to cause a heap-based buffer overflow via a specially crafted DivX file. Successful exploitation may allow execution of arbitrary code by tricking a user into visiting a malicious website. Version 1.4.2.7 is affected.

tags | advisory, web, overflow, arbitrary

advisories | CVE-2008-5259

SHA-256 | 54ea8ecf7fafd5257e181eedfb9f4396be203de36a9e6faff27b7efd86841baa

Download | Favorite | View