Записи divx
11 опубликованных записей вендора divx.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-189 Numeric Errors2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
11 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
41В плане | CVE-2008-1912Proof of concept | Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of servicedivx · divx player · CWE-119 | Критическая9,3 | — | 11,7 % | 22 апр. 2008 г. |
39Наблюдать | CVE-2008-5259Эксплойта нет | Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a divx · divx web player · CWE-189 | Критическая9,3 | — | 5,7 % | 16 апр. 2009 г. |
32Наблюдать | CVE-2007-1294Proof of concept | A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote adivx · divx web player | Высокая7,8 | — | 3,1 % | 6 мар. 2007 г. |
31Наблюдать | CVE-2014-10024Эксплойта нет | Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote adivx · directshowdemuxfilter · CWE-189 | Высокая7,5 | — | 3,0 % | 13 янв. 2015 г. |
28Наблюдать | CVE-2006-6444Эксплойта нет | Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code viadivx · divx player | Средняя6,8 | — | 2,6 % | 10 дек. 2006 г. |
27Наблюдать | CVE-2008-0090Proof of concept | A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 cradivx · divx player · CWE-119 | Средняя5,0 | — | 22,5 % | 3 янв. 2008 г. |
27Наблюдать | CVE-2010-5232Эксплойта нет | Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in divx · divx plus player | Средняя6,9 | — | 0,4 % | 7 сент. 2012 г. |
27Наблюдать | CVE-2010-5231Эксплойта нет | Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse VersionCheckDLL.dll filedivx · divx player | Средняя6,9 | — | 0,4 % | 7 сент. 2012 г. |
21Наблюдать | CVE-2007-0429Proof of concept | DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of sedivx · divx player | Средняя5,0 | — | 2,9 % | 22 янв. 2007 г. |
21Наблюдать | CVE-2005-0304Эксплойта нет | Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a ..divx · divx player | Средняя5,0 | — | 1,8 % | 2 мая 2005 г. |
17Наблюдать | CVE-2008-1800Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script divx · divxdb · CWE-79 | Средняя4,3 | — | 1,2 % | 15 апр. 2008 г. |
- CVE-2008-191241В плане
Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service
КритическаяCVSS 9,3Proof of conceptEPSS 12 %divx · divx player22 апр. 2008 г.
- CVE-2008-525939Наблюдать
Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a
КритическаяCVSS 9,3Эксплойта нетEPSS 6 %divx · divx web player16 апр. 2009 г.
- CVE-2007-129432Наблюдать
A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote a
ВысокаяCVSS 7,8Proof of conceptEPSS 3 %divx · divx web player6 мар. 2007 г.
- CVE-2014-1002431Наблюдать
Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote a
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %divx · directshowdemuxfilter13 янв. 2015 г.
- CVE-2006-644428Наблюдать
Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via
СредняяCVSS 6,8Эксплойта нетEPSS 3 %divx · divx player10 дек. 2006 г.
- CVE-2008-009027Наблюдать
A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 cra
СредняяCVSS 5,0Proof of conceptEPSS 23 %divx · divx player3 янв. 2008 г.
- CVE-2010-523227Наблюдать
Untrusted search path vulnerability in DivX Plus Player 8.1.0 allows local users to gain privileges via a Trojan horse ssleay32.dll file in
СредняяCVSS 6,9Эксплойта нетEPSS 0 %divx · divx plus player7 сент. 2012 г.
- CVE-2010-523127Наблюдать
Untrusted search path vulnerability in DivX Player 7.2.019 allows local users to gain privileges via a Trojan horse VersionCheckDLL.dll file
СредняяCVSS 6,9Эксплойта нетEPSS 0 %divx · divx player7 сент. 2012 г.
- CVE-2007-042921Наблюдать
DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of se
СредняяCVSS 5,0Proof of conceptEPSS 3 %divx · divx player22 янв. 2007 г.
- CVE-2005-030421Наблюдать
Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a ..
СредняяCVSS 5,0Эксплойта нетEPSS 2 %divx · divx player2 мая 2005 г.
- CVE-2008-180017Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script
СредняяCVSS 4,3Proof of conceptEPSS 1 %divx · divxdb15 апр. 2008 г.