Torrentfreak are reporting that two vulnerabilities have been discovered in VLC Player which allow execution of arbitrary code. The second vulnerability has already been fixed in the newest version of VLC which is available for download on the developers homepage. The first vulnerability however can be exploited to cause stack-based buffer overflows when loading subtitles in VLC.
The solution given by the security company that discovered the vulnerability is to load only subtitles from trusted source or no subtitles at all until an official fix has been posted by the developers ov VLC.
Another option would be to switch to another player for the time being. SMPlayer, my favorite player, is another good choice which does not have this vulnerability.
Enjoyed the article?: Then sign-up for our free newsletter or RSS feed to kick off your day with the latest technology news and tips, or share the article with your friends and contacts on Facebook or Twitter.
Related Articles:
Real Player Internet Explorer vulnerabilityAdobe Reader, Acrobat and Flash Player Zero Day Vulnerability
Adobe Flash Player Clickjacking Vulnerability
Google Chrome Address Spoofing Vulnerability
LastPass Fixes XSS Vulnerability, Improves Security
Is there yet a way to avoid the “Pause”-lag?
Also try MPC, I use 3 players VLC, SMplayer and MPC. Not every Player can actually play .avi files.