CVE-2009-2484: Videolan Vlc Media Player

High severity, CVSS 9.3. EPSS: 35.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long smb URI in a playlist file.

Affected products

• Videolan Vlc Media Player: version 0.9.9 only

Published 2009-07-16. Last modified 2026-06-16.