Secunia Research has discovered a vulnerability in DivX Web Player, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a signedness error in the processing of “STRF” (Stream Format) chunks. This can be exploited to cause a heap-based buffer overflow via a specially crafted DivX file. Successful exploitation may allow execution of arbitrary code by tricking a user into visiting a malicious website. Version 1.4.2.7 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/76689/secunia-divx.txt
Source: https://packetstormsecurity.com/files/76689/DivX-Web-Player-Stream-Format-Chunk-Buffer-Overflow.html