VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14698
https://exchange.xforce.ibmcloud.com/vulnerabilities/31515
http://wiki.videolan.org/Changelog/0.8.6b
http://downloads.securityfocus.com/vulnerabilities/exploits/22003.py