Description
Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin.
References
- 13969 third-party-advisory
- 20050121 Arbitrary files overwriting through skins in DivX Player 2.6 mailing-list
- divx-player-directory-traversal(19030) vdb-entry
- http://aluigi.altervista.org/adv/divxplayer-adv.txt
- 12332 vdb-entry