CVE-2007-2601: Divx City Gdivx Zenith Player

High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days.

Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value.

Affected products

• Divx City Gdivx Zenith Player: version 1.1 only; version 1.2 only

Published 2007-05-11. Last modified 2026-06-16.