VideoLAN.VLC.Media.Player.SMB.URI.Invalid.Free

Release Date Mar 11, 2010
Severity high
Impact System Compromise
Description This indicates an attack attempt against a memory corruption vulnerability in VideoLAN VLC media player. The vulnerability is caused by an invalid free error when the vulnerable software handles a specially crafted SMB URI. It allows a remote attacker to execute arbitrary code.
Affected Products VideoLAN VLC media player 1.0.1 VideoLAN VLC media player 1.0 VideoLAN VLC media player 0.9.9
Recommended Actions Update to the latest versions: http://www.videolan.org/
Coverage IPS VCM
Reference/s http://www.securityfocus.com/bid/35500 (BugTraq)

Fortinet