full-disclosure - [FD] Divx plugin suite heap-based buffer overflow

Open Source and information security mailing list archives

Message-ID: <966B5774ECBD134698EE5E8CA17FD49537F1EBDF@CERNXCHG74.cern.ch>
Date: Sat, 26 Apr 2014 16:59:18 +0000
From: Andres Gomez Ramirez <andres.gomez@...n.ch>
To: "fulldisclosure@...lists.org" <fulldisclosure@...lists.org>
Subject: [FD] Divx plugin suite heap-based buffer overflow

Introduction:

DirectShowDemuxFilter as part of Divx plugin suite is vulnerable to heap-based buffer overflow,
which can be exploited by malicious people to compromise a user's system. The vulnerability is
caused due to a signedness error in the processing of "STRF" (Stream Format) chunks.
This can be exploited to cause a heap-based buffer overflow via a specially crafted AVI file.
Successful exploitation may allow execution of arbitrary code by tricking a user into visiting a
malicious website.

DirectShowDemuxFilter is used by DivX Web Player, Divx Player and any application using
Divx plugins like Windows Media Player (When Divx is installed).

References:
http://kuronosec.blogspot.de/2014/04/divx-plugin-suite-heap-based-buffer.html

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives