The VLC media player contains a stack overflow vulnerability while parsing malformed TiVo ty media files. The vulnerability can be trivially exploited by a (remote) attacker to execute arbitrary code in the context of VLC media player. Versions 0.9.4 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/71091/TKADV2008-010.txt
Source: https://packetstormsecurity.com/files/71091/TKADV2008-010.txt.html