Secunia Research has discovered a vulnerability in DivX Web Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a signedness error in the processing of "STRF" (Stream Format) chunks. This can be exploited to cause a heap-based buffer overflow via a specially crafted DivX file.

Successful exploitation may allow execution of arbitrary code by tricking a user into visiting a malicious website.

The vulnerability is confirmed in version 1.4.2.7. Other versions may also be affected.

Solution
Update to version 1.4.3.4, included in an updated DivX bundle.
Further details available in Customer Area

Provided and/or discovered by
Alin Rad Pop, Secunia Research

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2008-57/

Deep Links
Links available in Customer Area