Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-1912. PoCs published by lhoang8500, securfrog.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in DivX Player <=6.7 during SRT subtitle parsing. It uses a crafted SRT file with UTF8-encoded shellcode to trigger a stack-based overflow, leading to arbitrary code execution (e.g., launching Calculator).
Description
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT file.
Exploits (2)
This exploit targets a buffer overflow vulnerability in DivX Player <=6.7 during SRT subtitle parsing. It uses a crafted SRT file with UTF8-encoded shellcode to trigger a stack-based overflow, leading to arbitrary code execution (e.g., launching Calculator).
This exploit demonstrates a buffer overflow vulnerability in DIVX Player <= 6.7.0 by creating a malformed .SRT subtitle file with an overly long subtitle, leading to a crash with EIP overwrite.