VideoLAN.VLC.Media.Player

NameVideoLAN.VLC.Media.Player.MP4_BoxDumpStructure.Buffer.Overflow
Release DateDec 29, 2009
SeverityMedium
ImpactSystem Compromise
DescriptionThis indicates an attack attempt against a buffer-overflow vulnerability in VideoLAN VLC media player.

The vulnerability is caused by an error when the vulnerable software handles a specially crafted ".mp4" file. It allows a remote attacker to execute arbitrary code.
Affected ProductsVideoLAN VLC media player 1.0.1 and previous versions
Recommended ActionsUpgrade to the latest versions:
http://www.videolan.org/
Reference/shttp://www.securityfocus.com/bid/36439 (BugTraq)
http://secunia.com/advisories/36762/
http://www.vupen.com/english/advisories/2009/2691
http://xforce.iss.net/xforce/xfdb/53366
Reference: VID-18002