DovX Web Player ActiveX DoS
Published:		02.03.2007
Source:		MILW0RM
SecurityVulns ID:		7334
Type:		client
Level:		3/10
Description:		Crash on large 'resize' method values.

Affected:		DIVX : DivX Web Player 1.3
CVE:		CVE-2007-1294 (A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via large values to DivxWP.Resize, related to resizing images.)

Discuss:

Read or add your comments to this news (0 comments)