A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.125
EPSS Ranking 93.6%