CVE-2008-0090: Divx Player

Medium severity, CVSS 5.0. EPSS: 22.5% chance of exploitation in the next 30 days.

A certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long argument to the SetPassword method.

Affected products

• Divx Divx Player: version 6.6.0 only
• Microsoft Internet Explorer: version 7 only

Published 2008-01-04. Last modified 2026-06-16.