CVE-2008-1912

DivX Player <6.7.0.22 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT file.

Exploits (2)

exploitdb WORKING POC VERIFIED

by lhoang8500 · c++localwindows

https://www.exploit-db.com/exploits/5492

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by securfrog · perldoswindows

https://www.exploit-db.com/exploits/5453

View Code ZIP pw:eip

References (7)

[Vendor Advisory] http://secunia.com/advisories/29780

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/490898/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28799

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5453

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5492

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1019921

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/1235/references

Scores

EPSS 0.2356

EPSS Percentile 96.0%

Details

CWE

CWE-119

Status published

Products (1)

divx/divx_player < 6.7

Published Apr 22, 2008

Tracked Since Feb 18, 2026