Signature Detail

HTTP: DivX Plus Web Player URL Stack Buffer Overflow Vulnerability

This signature detects attempts to use unsafe ActiveX controls in divX Player. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

DivX Plus Web Player is prone to a remote stack-based buffer-overflow vulnerability due to a failure to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. DivX Plus Web Player 2.1.2.265 is vulnerable; other versions may also be affected.

Affected Products

• DivX Inc. DivX Web Player 2.1.2.265

References

• BugTraq: 49647