critical9.3Public exploit code
CVE-2008-1912
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DivX Player 6.7 - '.srt' File Subtitle Parsing Buffer Overflow2008-04-24 · local · windows · Verified
- DivX Player 6.7.0 - '.srt' File Buffer Overflow (PoC)2008-04-15 · dos · windows · Verified
Impact
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Divx | Divx Player | through 6.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29780
- http://www.securityfocus.com/archive/1/490898/100/0/threaded
- http://www.securityfocus.com/bid/28799
- http://www.securitytracker.com/id?1019921
- http://www.vupen.com/english/advisories/2008/1235/references
- https://www.exploit-db.com/exploits/5453
- https://www.exploit-db.com/exploits/5492
- http://secunia.com/advisories/29780
- http://www.securityfocus.com/archive/1/490898/100/0/threaded
- http://www.securityfocus.com/bid/28799
- http://www.securitytracker.com/id?1019921
- http://www.vupen.com/english/advisories/2008/1235/references
- https://www.exploit-db.com/exploits/5453
- https://www.exploit-db.com/exploits/5492