Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmjx-fq7m-272x

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.

EPSS

Процентиль: 87%
0.03377
Низкий

Связанные уязвимости

nvd
около 11 лет назад

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.

EPSS

Процентиль: 87%
0.03377
Низкий