Test ID:	1.3.6.1.4.1.25623.1.0.900537
Category:	Buffer overflow
Title:	DivX Web Player Buffer Overflow Vulnerability
Summary:	DivX Web Player is prone to a buffer overflow vulnerability.
Description:	Summary: DivX Web Player is prone to a buffer overflow vulnerability. Vulnerability Insight: This flaw is due to the boundary checking error while processing Stream Format 'STRF' chunks which causes heap overflow. Vulnerability Impact: Successful exploitation will let the attacker execute arbitrary codes within the context of the application by tricking a user into opening a crafted DivX file. Affected Software/OS: DivX Web Player 1.4.2.7 and prior on Windows. Solution: Update to version 1.4.3.4. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5259 BugTraq ID: 34523 http://www.securityfocus.com/bid/34523 Bugtraq: 20090415 Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/502701/100/0/threaded http://secunia.com/secunia_research/2008-57/ http://www.securitytracker.com/id?1022061 http://secunia.com/advisories/33196 http://www.vupen.com/english/advisories/2009/1044 XForce ISS Database: divxwebplayer-strf-bo(49908) https://exchange.xforce.ibmcloud.com/vulnerabilities/49908
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.