CVE:CVE-2008-0090
CNNVD:CNNVD-200801-037
DivX Player是Divx的一个播放器。
DivX Player 6.6.0版本下的npUpload.dll中的某一个ActiveX控件允许远程攻击者借助设置密码的方式来引起拒绝服务攻击或者IE7的崩溃。
solution:Upgrade divx divx_player to a higher version than 6.6.0,and avoid the version 6.6.0; Upgrade microsoft internet_explorer to a higher version than 7,and avoid the version 7