A New critical security vulnerability found in VLC video player.

Tweet

Share

Just a few days after the VLC developers fixed a vulnerability in the popular VLC video player, a new critical security vulnerability in the processing of .mkv files became public. By opening specially crafted .mkv files, the computer can be infected with a Trojan, for example. The files don’t need the .mkv extension necessarily as VLC tries to find the appropriate demultiplexing routines automatically.

A fix is already available in the source code repositories – but a new installation version which isn't affected by the flaw is not yet ready. Until then, don’t open files from untrusted sources with VLC!

Via Avira – TechBlog

Again critical vulnerability in VLC

http://techblog.avira.com/2011/01/31/again-critical-vulnerability-in-vlc/en/

VideoLAN Security Advisory 1102

http://www.videolan.org/security/sa1102.html

Older Advisory ( December 2010 )

VideoLan has issued a security advisory for VLC Media Player.

http://scamsniper.blogspot.com/2011/01/vidoelan-has-issued-security-advisory.html

About Black Knight

I am a computer repair technician with over 15 years experience and have been computer security and information privacy enthusiast for the last 4 years. I've helped literally thousands of individuals fix their issues by offering help through various blogs and Facebook pages. I like teaching myself and others new things, and believe in freely sharing knowledge.