Integer signedness error in DivX Web Player 1.4.2.7 and possibly earlier versions allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk which triggers a heap-based buffer overflow.