This host is installed with VLC Media Player and is prone to double free vulnerability.

Successful exploitation will allow an attacker to crash an affected application and denying service to legitimate users. Impact Level: Application

Upgrade VLC media player to 1.1.13 or later, For updates refer to http://www.videolan.org/vlc/

The flaw is due to a double-free error within the 'get_chunk_header()' function in 'modules/demux/ty.c' of the TiVo demuxer when opening a specially crafted TiVo (*.ty) file.

VLC media player version 0.9.0 to 1.1.12 on Mac OS X

• http://secunia.com/advisories/47325
• http://securitytracker.com/id?1026449
• http://www.osvdb.org/77975
• http://www.videolan.org/security/sa1108.html
• http://xforce.iss.net/xforce/xfdb/71916

---

Updated on 2015-03-25