Priority LOW 38
Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a St…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0296 · Published 2015-01-13 · No fix listed CWE-189
Priority LOW 31
Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in a certain directory.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00403 · Published 2012-09-07 · No fix listed
Priority LOW 31
Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse VersionCheckDLL.dll file in the current working directory, as demonstrated by a directory that contains…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00399 · Published 2012-09-07 · No fix listed
Priority MEDIUM 49
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05718 · Published 2009-04-16 · No fix listed CWE-189
Priority MEDIUM 54
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT fil…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11731 · Published 2008-04-22 · No fix listed CWE-119
Priority LOW 22
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1) choice, (2) _page_, (3) zone_admin, (4) general_search, and…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01189 · Published 2008-04-15 · No fix listed CWE-79
Priority MEDIUM 43
A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.22526 · Published 2008-01-04 · No fix listed CWE-119
Priority MEDIUM 40
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via large valu…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.0322 · Published 2007-03-07 · No fix listed
Priority LOW 28
DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) by invoking the GoWindowed method for a certai…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03029 · Published 2007-01-23 · No fix listed
Priority LOW 35
Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long string in an M3U file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02699 · Published 2006-12-10 · No fix listed
Priority LOW 26
Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a ..
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01766 · Published 2005-02-10 · No fix listed