VLC Media Player Security Vulnerability

[Cal Bear '66]

Bonn, Germany - A security hole has been discovered in the VLC Media Player, the
German Federal Agency for Security in Information Technology (BSI) in Bonn
reported. Attackers can exploit this vulnerability using rigged Real Media files
(file ending with "rm") to install malicious software onto the user's computer.
The victim has just to open the manipulated multimedia file.

VLC Media Player versions prior to release 0.9.8 are affected, the BSI reports.
The software maker has fixed the problem for Version 0.9.8, but to date has only
made the source code available. All VLC Media Player users are advised to remove
the file libreal_plugin manually from the VLC plug-in installation directory.

http://www.earthtimes.org/articles/...ut-vulnerability-in-the-vlc-media-player.html

Unfortunately, the latest version of VLC Media Player, the 0.9.8 has some severe
faults, so an upgrade seems not to be the answer.

http://forums.techarena.in/windows-software/1083470.htm


I Bleed Blue and Gold
GO BEARS!

 

[Spirit]

This was fixed in 0.98a available at the website.

http://www.videolan.org/

 

[Daniela]

Bonn, Germany - A security hole has been discovered in the VLC Media Player, the
German Federal Agency for Security in Information Technology (BSI) in Bonn
reported. Attackers can exploit this vulnerability using rigged Real Media files
(file ending with "rm") to install malicious software onto the user's computer.
The victim has just to open the manipulated multimedia file.

VLC Media Player versions prior to release 0.9.8 are affected, the BSI reports.
The software maker has fixed the problem for Version 0.9.8, but to date has only
made the source code available. All VLC Media Player users are advised to remove
the file libreal_plugin manually from the VLC plug-in installation directory.

http://www.earthtimes.org/articles/...ut-vulnerability-in-the-vlc-media-player.html

Unfortunately, the latest version of VLC Media Player, the 0.9.8 has some severe
faults, so an upgrade seems not to be the answer.

http://forums.techarena.in/windows-software/1083470.htm


I Bleed Blue and Gold
GO BEARS!

 

[occam]

Daniela

This is old news. There has been a 'patch' release of VLC version
0.9.8.a soon after. You can get it here:

http://www.filehippo.com/download_vlc/