← All CVEs

CVE-2008-0090

medium · 5

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.

5
CVSS
22.5%
EPSS (exploit prob.)
98th
EPSS percentile
2008-01-04
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
divxdivx_player6.6.0
microsoftinternet_explorer7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-0090