KLA11032
Denial of service vulnerabilities in VideoLAN VLC media player

Multiple serious vulnerabilities have been found in VideoLAN VLC media player. Malicious users can exploit these vulnerabilities to cause a denial of service or possibly have another unspecified impact.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in pluginsaudio_filterlibmpgatofixed32_plugin.dll can be exploited remotely via a specially designed file to cause a denial of service;
2. An unspecified vulnerability inpluginscodeclibflac_plugin.dll can be exploited remotely via a specially designed FLAC file to cause a denial of service.

NB: These vulnerabilities do not have any public CVSS rating so rating can be changed by the time.

VideoLAN VLC media player 2.2.4

Update to the latest version
Download VLC media player