CVE-2009-1045: Videolan Vlc Media Player

Medium severity, CVSS 5.0. EPSS: 9.2% chance of exploitation in the next 30 days.

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action.

Affected products

• Videolan Vlc Media Player: version 0.9.8a only

Published 2009-03-23. Last modified 2026-06-16.