DivX Player 6.6.0 - Denial of Service via npUpload.dll SetPassword Method
A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.