This host is installed with VLC Media Player and is prone to Memory Corruption Vulnerability.

Successful exploitation allows attackers to execute arbitrary code by tricking a user into opening a specially crafted XSPF file or even can crash an affected application. Impact Level: Application

Upgrade to Version 0.9.3 or later, http://www.videolan.org/vlc/

The flaw exists due to VLC (xspf.c) library does not properly perform bounds checking on an identifier tag from an XSPF file before using it to index an array on the heap.

VLC media player 0.9.2 and prior Windows (Any).

• http://secunia.com/advisories/32267/
• http://www.coresecurity.com/content/vlc-xspf-memory-corruption
• http://www.frsirt.com/english/advisories/2008/2826/products

---

Updated on 2015-03-25