NVD

Id
29883  
Name
CVE-2014-10024  
Description
Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an AVI file, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-13  
Modified Date
2015-01-13  
Seq
2014-10024  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157609 29883 CVE-2014-10024 20140426 Divx plugin suite heap-based buffer overflow  View
157610 29883 CVE-2014-10024 67086  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18751 JVNDB-2014-007626 複数の DivX 製品で使用される DirectShowDemuxFilter における整数符号エラーの脆弱性 DivX Web Player、DivX Player、およびその他の DivX プラグインで使用される DirectShowDemuxFilter には、整数符号エラーの脆弱性が存在します。 CVE-2014-10024 68466 CVE-2014-10024 29883 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007626.html 2014-04-26 2015-01-16 View