Launchpad.net

CVE 2010-3276

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.

CVE-2010-3276 (Candidate) is related to these bugs:

Bug #756368: Heap overflow in MP4 demuxer

		In	Importance	Status
756368	Heap overflow in MP4 demuxer	vlc (Ubuntu)	Undecided	Fix Released
756368	Heap overflow in MP4 demuxer	VLC media player	Critical	Fix Released
756368	Heap overflow in MP4 demuxer	VLC media player 1.0-bugfix	Undecided	Fix Released
756368	Heap overflow in MP4 demuxer	vlc (Ubuntu Lucid)	Undecided	Fix Released
756368	Heap overflow in MP4 demuxer	vlc (Ubuntu Maverick)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.