CVE-2014-10024
13.01.2015, 11:59
Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| divx | directshowdemuxfilter | * |
| divx | player | * |
| divx | web_player | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration