CVE-2007-1294: Divx Web Player

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

A certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as distributed with DivX Player 1.3.0, allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via large values to DivxWP.Resize, related to resizing images.

Affected products

• Divx Divx Web Player: version 1.3.0 only

Published 2007-03-07. Last modified 2026-06-16.