The host is installed with VLC Media Player and is prone multiple buffer overflow vulnerabilities.

Successful exploitation could allow attackers to crash the affected application, or execute arbitrary code by convincing a user to open a malicious CD+G (CD+Graphics) media file or visit a specially crafted web page. Impact Level: Application

Upgrade to the VLC media player version 1.1.6 or later, For updates refer to http://www.videolan.org/vlc/

The flaws are due to an array indexing errors in the 'DecodeTileBlock()' and 'DecodeScroll()' [modules/codec/cdg.c] functions within the CDG decoder module when processing malformed data.

VLC media player version prior to 1.1.6 on Windows.

• http://openwall.com/lists/oss-security/2011/01/20/3
• http://www.vupen.com/english/advisories/2011/0185

---

Updated on 2015-03-25