CVE-2005-0304 Information

Description

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin.

Reference

http://aluigi.altervista.org/adv/divxplayer-adv.txt http://marc.info/?l=bugtraq&m=110642748517854&w=2 http://secunia.com/advisories/13969 http://www.securityfocus.com/bid/12332 https://exchange.xforce.ibmcloud.com/vulnerabilities/19030