Vlc Media Player Activex Plugin And Flac Vulnerabilities

[TCH-Thomas]

From: Secunia

secunia.com/advisories/27878/

 

Rating: Highly critical

 

Description:

Some vulnerabilities have been reported in VLC Media Player, which potentially can be exploited by malicious people to compromise a user's system.

 

1) An error within the ActiveX plugin of VLC Media Player can be exploited to overwrite certain memory zones and execute arbitrary code when a user e.g. visits a malicious website.

 

Note: This affects the Windows versions only.

 

2) Some vulnerabilities are caused due to the use of a vulnerable version of the FLAC library, which contains multiple integer overflows.

 

Solution:

Update to version 0.8.6d.

videolan.org/vlc/

[TCH-Bruce]

Thanks Thomas