CVE-2014-10024

Exploit

EPSS 3.38%
Veröffentlicht 13.01.2015 11:59:31
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Divx ≫ Directshowdemuxfilter

Divx ≫ Player

Divx ≫ Web Player

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.38%	0.862

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://seclists.org/fulldisclosure/2014/Apr/283

Exploit

http://www.securityfocus.com/bid/67086

https://nvd.nist.gov/vuln/detail/CVE-2014-10024

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-10024

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-10024

EUVD