Secunia

Parvez Anwar has discovered a vulnerability in Nostra DivX Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when loading M3U playlist files containing an overly long string (greater than 33200 bytes). This can be exploited to cause a stack-based buffer overflow via a specially crafted playlist file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 2.1 and has also been reported in version 2.2.00.0. Other versions may also be affected.

Solution
Do not open untrusted playlists.

Provided and/or discovered by
Parvez Anwar

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area