A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 00:41
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://www.securityfocus.com/bid/27106 - Exploit | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/39386 - | |
| References | () https://www.exploit-db.com/exploits/4829 - | 
Information
                Published : 2008-01-04 01:46
Updated : 2025-04-09 00:30
NVD link : CVE-2008-0090
Mitre link : CVE-2008-0090
CVE.ORG link : CVE-2008-0090
JSON object : View
Products Affected
                microsoft
- internet_explorer
divx
- divx_player
CWE
                
                    
                        
                        CWE-119
                        
            Improper Restriction of Operations within the Bounds of a Memory Buffer
