VLC media players versions below 0.9.7 suffer from a RealMedia processing integer overflow vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72485/TKADV2008-013.txt
Source: https://packetstormsecurity.com/files/72485/TKADV2008-013.txt.html