Debian Linux Security Advisory 2211-1 – Ricardo Narvaja discovered that missing input sanitizing in VLC, a multimedia player and streamer, could lead to the execution of arbitrary code if a user is tricked into opening a malformed media file.
Source: Debian Security Advisory 2211-1
