The host is installed with VLC Media Player and is prone buffer overflow vulnerability.

Successful exploitation could allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Impact Level: Application

Upgrade to the VLC media player version 1.0.6 or later, For updates refer to http://download.videolan.org/pub/videolan/vlc/

The flaw is due to a race condition error when creating bookmarks and can be exploited to corrupt memory by tricking a user into creating a bookmark while playing a specially crafted file.

VLC media player version prior to 1.0.6 on Windows

• http://osvdb.org/62728
• http://secunia.com/advisories/38853

---

Updated on 2015-03-25