Advisory: Subtitle Parsing Buffer Overflow Vulnerability in DivX Player

“Securfrog has discovered a Subtitle Parsing Buffer Overflow vulnerability in DivX Player. According to Secunia's notification, the vulnerability has been confirmed to exist in DivX Player 6.7 (build 6.7.0.22). Which can potentially be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the processing of subtitles. […]

“Securfrog has discovered a Subtitle Parsing Buffer Overflow vulnerability in DivX Player. According to Secunia's notification,
the vulnerability has been confirmed to exist in DivX Player 6.7 (build 6.7.0.22). Which can potentially be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the processing of subtitles. This can be exploited to cause a stack-based buffer overflow via an overly long subtitle line contained in a malicious SRT file,” Secunia wrote in the advisory published today. “Successful exploitation may allow execution of arbitrary code, but requires that the user is tricked into opening a specially crafted SRT file.”

Secunia rated the flaw as highly critical, which underlines the level of the vulnerability and the need to patch it as soon as possible. However, due to the fact that developers haven't released a patch yet, you should really try to apply the solution mentioned above in order to be sure you remain on the safe side.

DivX, Vulnerability, Exploit, Buffer Overflow