VideoLAN Releases VLC Media Player 1.1.8

[admin]

VideoLAN Releases VLC Media Player 1.1.8

Original release date: March 25, 2011 at 7:43 am
Last revised: March 25, 2011 at 7:43 am


VideoLAN has released VLC Media Player 1.1.8 to address two
vulnerabilities. These vulnerabilities are due to the improper
handling of .AMV and .NSV files. Exploitation of these vulnerabilities
may allow an attacker to execute arbitrary code.

US-CERT encourages users and administrators to review the release
notes for VLC Media Player 1.1.8 and apply any necessary updates to
help mitigate the risks.

Relevant Url(s):
<http://www.videolan.org/vlc/releases/1.1.8.html>

====
This entry is available at
http://www.us-cert.gov/current/index.ht ... dia_player