This host is installed with VLC media player and is prone to array indexing vulnerabilities.

Successful exploitation will allow the attackers to crash an affected application or compromise a vulnerable system by convincing a user to open a malicious media file or to visit a specially crafted web page. Impact Level: Application.

Upgrade to VLC version 1.1.6 or apply patch from below link, For updates refer to http://www.videolan.org/vlc/

This issue is caused by an array indexing error in the 'Close()' and 'DemuxAudioMethod1()' [modules/demux/real.c] functions within the Real demuxer when processing a Real Media file with a zero 'i_subpackets' value.

VLC Media Player version 1.1.5 and prior.

• http://www.cs.brown.edu/people/drosenbe/research.html
• http://www.videolan.org/security/sa1007.html
• http://www.vupen.com/english/advisories/2010/3345

---

Updated on 2015-03-25