CVE-2011-1087: Videolan Vlc Media Player

High severity, CVSS 7.6. EPSS: 8.1% chance of exploitation in the next 30 days.

Buffer overflow in VideoLAN VLC media player 1.0.5 allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .mp3 file that is played during bookmark creation.

Affected products

• Videolan Vlc Media Player: version 1.0.5 only

Published 2011-05-03. Last modified 2026-06-16.