Current stable VLC is vulnerable, details see here: http://www.videolan.org/security/sa1301.html
(In reply to comment #0)
> Current stable VLC is vulnerable, details see here:
Thank you for the report.
video herd, may we stabilize =media-video/vlc-2.0.5 ?
I did amd64 x86 ppc and ppc64.
please stabilise =media-video/vlc-2.0.5 and media-libs/opus-1.0.1
Adding to existing GLSA draft after CVE has been assigned.
Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier
allow remote attackers to cause a denial of service (crash) and execute
arbitrary code via vectors related to the (1) freetype renderer and (2) HTML
This issue was resolved and addressed in
GLSA 201411-01 at http://security.gentoo.org/glsa/glsa-201411-01.xml
by GLSA coordinator Sean Amoss (ackle).