|
||
| Editor Login | Register | ||
| > World > Security |
|
|
| DivX Player Subtitle Parsing Buffer Overflow Vulnerability | ||||||||||||||||||||||||
securfrog has discovered a vulnerability in DivX Player, which can potentially be exploited by malicious people to compromise a user"s system. The vulnerability is caused due to a boundary error in the processing of subtitles. This can be exploited to cause a stack-based buffer overflow via an overly long subtitle line contained in a malicious SRT file. Successful exploitation may allow execution of arbitrary code, but requires that the user is tricked into opening a specially crafted SRT file. The vulnerability is confirmed in DivX Player 6.7 (build 6.7.0.22). Other versions may also be affected. Solution: Disable the automatic loading of subtitles. Do not open untrusted subtitles. Provided and/or discovered by: securfrog Original Advisory: http://milw0rm.com/exploits/5453 | ||||||||||||||||||||||||
|
| Bağlantılar: bilgininefendisi.net |
| Open Source Document Project | AUP&TOS |
