This host is installed with VLC media player and is prone to insecure library loading vulnerability.

Successful exploitation will allow the attackers to execute arbitrary code and conduct DLL hijacking attacks. Impact Level: Application.

Upgrade to VLC version 1.1.4 or apply patch from below link, For updates refer to http://www.videolan.org/vlc/

The flaw is due to the application insecurely loading certain librairies from the current working directory, which could allow attackers to execute arbitrary code by tricking a user into opening a file from a network share.

VLC Media Player version 1.1.3 and prior.

• http://secunia.com/advisories/41107
• http://www.exploit-db.com/exploits/14750/
• http://www.openwall.com/lists/oss-security/2010/08/25/9
• http://www.openwall.com/lists/oss-security/2010/08/25/10
• http://www.vupen.com/english/advisories/2010/2172

---

Updated on 2015-03-25