VLC Media Player 1.1.11 closes heap overflow holes
The VideoLAN project has announced the release of version 1.1.11 of VLC Media Player. The twelfth release of the 1.1.x branch of VLC is a maintenance and security update that fixes two previously reported heap overflow vulnerabilities in the Real Media and AVI file parsers.
Other changes include improvements to the VLC interface on Mac OS X systems and fullscreen fixes for the Win32 web plug-in, as well as several codec and translation updates. Extensions support and the AVI muxer for converting and transcoding have also received fixes. All users are advised to upgrade to the latest version.
Further information about the update, including a full list of changes, can be found in the official release announcement and in the NEWS file. Version 1.1.11 of the VLC Media Player is available to download from the project's web site. VLC is released under version 2 of the GNU General Public License.