CVE-2014-10024

Exploit

EPSS 3.38%
Published 13.01.2015 11:59:31
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Divx ≫ Directshowdemuxfilter

Divx ≫ Player

Divx ≫ Web Player

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.38%	0.862

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://seclists.org/fulldisclosure/2014/Apr/283

Exploit

http://www.securityfocus.com/bid/67086

https://nvd.nist.gov/vuln/detail/CVE-2014-10024

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-10024

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-10024

EUVD