CVE-2008-5259

Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap-based buffer overflow.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:divx:divx_web_player:*:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.1:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.2:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.3:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.4:*:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.4.0:beta2:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.4.1:beta1:*:*:*:*:*:*
cpe:2.3:a:divx:divx_web_player:1.4.2:beta2:*:*:*:*:*:*

History

No history.

Information

Published : 2009-04-16 15:12

Updated : 2024-02-28 11:21


NVD link : CVE-2008-5259

Mitre link : CVE-2008-5259

CVE.ORG link : CVE-2008-5259


JSON object : View

Products Affected

divx

  • divx_web_player
CWE
CWE-189

Numeric Errors