Due to a security flaw spotted in older versions

Apr 10, 2008 07:19 GMT  ·  By

VLC Media Player is quite a popular application nowadays, especially because it provides a remarkable functionality bundled with a freeware license. This means that users are able to take advantage of its applaudable functions without paying for the software, as in the case of other programs on the market.

However, users of older versions of VLC Media Player are urged to update to the latest version of the application because a security flaw has been spotted in these releases. Calling it "VLC Media Player Browser Plugin Arbitrary File Overwrite Vulnerability," the folks of SecurityFocus explained that VLC Media Player 0.8.6, 0.8.6a, 0.8.6b and several edition of the program addressed to Debian Linux are all vulnerable.

The only version not vulnerable to this security flaw is VLC Media Player 0.8.6d which was especially rolled out by VideoLAN to correct the glitch.

"VLC media player is prone to a vulnerability that allows attackers to overwrite arbitrary files. Successful exploits can compromise the computer or cause denial-of-service conditions. Versions prior to VLC media player 0.8.6d are vulnerable," SecurityFocus explained in the security advisory published on its main page.

At this time, there's no confirmation of a potential successful exploitation of the flaw, but consumers who are currently using older releases of VLC Media Player should update the application as soon as possible.

VLC Media Player supports a large series of formats, starting with 3GP, AVI, QuickTime, WAV and MP3 and ending with AAC, AC3, AMR, FLAC and WMA. Unfortunately, the application can't open or play the files based on RealMedia, Fraps and MIDI codecs.

For those of you who want to download the latest release of VLC Media Player, you can find it right here on Softpedia by clicking on the following link.