CVE-2005-0304

CVE-2005-0304

EPSS 1.8%

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://aluigi.altervista.org/adv/divxplayer-adv.txt http://marc.info/?l=bugtraq&m=110642748517854&w=2 http://secunia.com/advisories/13969 https://exchange.xforce.ibmcloud.com/vulnerabilities/19030 http://www.securityfocus.com/bid/12332