Divx

11 CVEs across 7 Divx products. Browse Divx vulnerabilities, severities, and proof-of-concept exploits.

Divx products with known CVEs

ProductCVEs
Divx Player6
Divx Web Player2
Directshowdemuxfilter1
Divxdb1
Divx Plus Player1
Player1
Web Player1
Divx CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2014-100242015-01-13Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute…
CVE-2010-52322012-09-07Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in a certain directory…
CVE-2010-52312012-09-07Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse VersionCheckDLL.dll file in the current wor…
CVE-2008-52592009-04-16Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containin…
CVE-2008-19122008-04-22Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash…
CVE-2008-18002008-04-15Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2008-00902008-01-04A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argu…
CVE-2007-12942007-03-07A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a…
CVE-2007-04292007-01-23DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of service (Internet Exp…
CVE-2006-64442006-12-10Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long string in a…
CVE-2005-03042005-05-02Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP…