Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16930
http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml
http://secunia.com/advisories/12194/