vlc -- arbitrary code execution in the RealMedia processor

Tobias Klein from TrapKit reports:

The VLC media player contains an integer overflow vulnerability
while parsing malformed RealMedia (.rm) files. The vulnerability
leads to a heap overflow that can be exploited by a (remote)
attacker to execute arbitrary code in the context of VLC media
player.