CVE:CVE-2014-10024
CNNVD:CNNVD-201404-549
Divx Web Player和Divx Player都是DivX公司的Divx Plugin Suite插件套件中的浏览器插件。DirectShowDemuxFilter是一个过滤器。
Divx Web Player、Divx Player及其他Divx插件中使用的DirectShowDemuxFilter中的AVI文件的Stream Format(STRF)块中存在整数符号错误漏洞。远程攻击者可借助负数或超大的值利用该漏洞执行任意代码，造成堆缓冲区溢出。
solution:Upgrade divx directshowdemuxfilter to a higher version than *; Upgrade divx player to a higher version than *; Upgrade divx web_player to a higher version than *