icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

VLC Media Player < 1.1.9 Heap Corruption Vulnerability

High

Synopsis

The remote host contains an application that allows arbitrary code execution.

Description

The remote host contains VLC player, a multi-media application.

Versions of VLC media player earlier than 1.1.9 are potentially affected by heap corruption vulnerability in the MP4 demultiplexer which could lead to arbitrary code execution.

Solution

Upgrade to VLC Media Player version 1.1.9 or later.