CVE-2008-0090 A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.
MediumCVSS 5.0
EPSS 22.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| divx player | = 6.6.0 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
References
- 27106 exploit vdb-entry
- divxwebplayer-npUpload-dos(39386) vdb-entry
- 4829 exploit