| Package | Affected versions | Patched versions |
|---|---|---|
| vlc | = 0.8.6d |
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free