CVE-2007-6683: Videolan Vlc

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filename in a playlist, or (2) a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability.

Affected products

• Videolan Vlc: version 0.8.6d only

Published 2008-01-17. Last modified 2026-06-16.