Approved changes feed: RSS · Atom

cpe:2.3:a:divx:divx_web_player:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

VendorDivx (bd9b8437-0bd5-5f29-a977-657cecd61261)
ProductDivx Web Player (fee2f711-0129-5114-be35-0e3a73a65c60)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5259 vulnerable 2026-06-03 14:29:08.415030 Details available
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap-based buffer overflow.
Published: 2009-04-16T15:00:00.000Z
Updated: 2024-08-07T10:49:12.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1294 vulnerable 2026-06-03 14:28:04.985066 Details available
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via large values to DivxWP.Resize, related to resizing images.
Published: 2007-03-07T00:00:00.000Z
Updated: 2024-08-07T12:50:35.266Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.