VLC Media Player HTML subtitle Parsing Buffer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:
VideoLAN VLC Media Player 2.x
Description:
--------------------------------------------------------------------------------
VLC Media Player is a multimedia Player.
 
VLC Media Player modules/codec/subsdec. c has an error in parsing the HTML subtitle. By specially crafted subtitle, attackers can cause a buffer overflow and execute arbitrary code.
 
<* Source: vendor

Link: http://secunia.com/advisories/51692/
Http://www.videolan.org/news.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
VideoLAN
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.videolan.org/