Leave a comment

2 zero-day flaws in VLC

2 zero-day flaws in VLC

Ask anyone who edits video for a living one of their biggest annoyances, and near the top of the list will be "too many video formats." MPEG-2, MPEG-4, WebM, MKV, FLV, Ogg, AVI, WMV, the list goes on. That doesn't even take into account the mixing and matching you can do with coding formats versus containers.

It's not surprising that a lot of video players, including Window's built-in Windows Media Player, don't handle every format. You might rip your home DVDs in one format and then find out you can't play it back. What can you do?

Fortunately, there are several open-source media players that do handle every format. The big name in the field is VideoLan's VLC, which I've featured as a download on my site for years. If you use it, however, you're going to need to be careful for a while.

A Turkish hacker let everyone know that there are two big flaws in VLC's core code. This code actually shows up in a lot of open-source media players, like MPlayer, so they're vulnerable too.

The flaws could allow hackers to take control of your computer. You just have to use VLC to play a malicious video file. Fortunately, it's easy enough to avoid.

First, the file format has to be FLV or M2V, that's an .flv or .m2v extension, so avoiding those file formats for now is a good idea. Click here to learn how to see a file's true extension so you don't open or run something malicious.

Second, don't play video files that you haven't created. The fastest way to get a malicious file is to download it from the Web or an email attachment.

Third, update VLC as soon as the next version comes out. The current version is 2.1.5 and the upcoming version that fixes the flaws is 2.2.0.

Until then, watch what files you play and stay safe.

Next Story
Source: The Register
View Comments ()
An entire PC is inside this mouse. Just plug it into a monitor and go
Previous Happening Now

An entire PC is inside this mouse. Just plug it into a monitor and go

Amazon Prime is $27 cheaper this weekend
Next Happening Now

Amazon Prime is $27 cheaper this weekend