The host is installed with VLC Media Player and is prone integer overflow vulnerability.

Successful exploitation could allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Impact Level: System/Application

Upgrade to the VLC media player version 1.1.10 or later, For updates refer to http://download.videolan.org/pub/videolan/vlc/

The flaw is due to an integer overflow in XSPF playlist file parser, which allows attackers to execute arbitrary code via unspecified vectors.

VLC media player version 0.8.5 through 1.1.9

• http://www.videolan.org/security/sa1104.html

---

Updated on 2015-03-25