Some vulnerabilities have been reported in VLC Media Player, which can be exploited by malicious, local users to gain escalated privileges, and by malicious people to potentially compromise a user's system.

1) An input validation error exists in the processing of Speex headers.

For more information:
SA29727

2) The problem is that the application executes e.g. the "vlc_entry__0_8_6" symbol from libraries with a file name matching the "lib*_plugin.so" pattern, placed in the "modules" or "plugins" subdirectories of the current working directory. This can be exploited to execute arbitrary code with escalated privileges by tricking a user into playing a file placed in a directory containing specially crafted libraries.

The vulnerabilities are reported in version 0.8.6f. Other versions may also be affected.

Solution
Update to version 0.9.0 or later.

Provided and/or discovered by
1) oCERT
2) Reported by courmisch in a VLC bug report.

Changelog
Further details available to Secunia VIM customers

Original Advisory
1) http://www.ocert.org/advisories/ocert-2008-004.html
http://trac.videolan.org/vlc/ticket/1556

2) http://trac.videolan.org/vlc/ticket/1578

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers