CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5259

Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.053

EPSS Ranking 89.6%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2008-5259

Divx » Divx Web Player » Version: N/A

cpe:2.3:a:divx:divx_web_player:-
Divx » Divx Web Player » Version: 1.0.1

cpe:2.3:a:divx:divx_web_player:1.0.1
Divx » Divx Web Player » Version: 1.0.2

cpe:2.3:a:divx:divx_web_player:1.0.2
Divx » Divx Web Player » Version: 1.1

cpe:2.3:a:divx:divx_web_player:1.1
Divx » Divx Web Player » Version: 1.1.0

cpe:2.3:a:divx:divx_web_player:1.1.0
Divx » Divx Web Player » Version: 1.2

cpe:2.3:a:divx:divx_web_player:1.2
Divx » Divx Web Player » Version: 1.2.0

cpe:2.3:a:divx:divx_web_player:1.2.0
Divx » Divx Web Player » Version: 1.3

cpe:2.3:a:divx:divx_web_player:1.3
Divx » Divx Web Player » Version: 1.3.0

cpe:2.3:a:divx:divx_web_player:1.3.0
Divx » Divx Web Player » Version: 1.3.1

cpe:2.3:a:divx:divx_web_player:1.3.1
Divx » Divx Web Player » Version: 1.4

cpe:2.3:a:divx:divx_web_player:1.4
Divx » Divx Web Player » Version: 1.4.0

cpe:2.3:a:divx:divx_web_player:1.4.0
Divx » Divx Web Player » Version: 1.4.1

cpe:2.3:a:divx:divx_web_player:1.4.1
Divx » Divx Web Player » Version: 1.4.2

cpe:2.3:a:divx:divx_web_player:1.4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5259

Products

Pricing

Contact Us