Debian Security Advisory DSA 1004-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1004-1. Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. The vlc media player links...