VLC Media Player is prone to a buffer overflow vulnerability, which could be exploited to execute arbitrary code on the affected system or cause the application to crash.

Install the latest version of VLC Media Player.

VLC media player is a well Known multimedia player and multimedia framework capable of reading most audio and video formats. There exists a buffer overflow vulnerability in VLC media player 0.6.8 and earlier versions.

The flaw exists due to improper bounds checking when processing Advanced SubStation Alpha Subtitle (.ass) files. An attacker may exploit this vulnerability by persuading a victim to open specially crafted (.ogg) file containing an associated specially-crafted (.ass) subtitle file, and possibly execute malicious code or launch further attacks on the target system.