The VideoLAN Forums

Hi,

Is the current version of VLC Player for Windows vulnerable to the exploit published on the following site? http://www.securitytracker.com/id/1035456

It mentions Debian Linux specifically, but also that other operating systems and versions might be affected as well.

Downloaded and installed v2.1.2 today, but it fails to update the Firefox plugin which remains at v2.1.0 according to the Firefox Add-ons Manager. This means that the VLC player remains vuilnerable to the RTSP exploit described in the following link when used in combination with the latest version o...

Updating VLC to v2.0.8 fails to update the Firefox plugin. Consequently, a plugin check reports it to be vulnerable. Steps taken before updating were as follows: Disabled Firefox plugin in the browser's Add-ons page. Uninstalled VLC 2.0.7 via Add/Remove Programs. Confirmed VLC plugin no longer appea...

Yes. I'm still not happy with it because according to VLC security advisory 1201: http://www.videolan.org/security/sa1201.html browser plugins prior to 2.0.1 should be disabled to prevent the exploit mentioned in that article. I reinstalled VLC 2.0.1 again this morning and deleted the VLC folder in...

This is normal, I think.

Do you have Firefox?

Like I mentioned already, I installed VLC 2.0.1 when it was first released which I believe was 19 March. I've restarted many times since then. I've also tried reinstalling it and although the player version v2.0.1 installs successfully, it doesn't update the Firefox plugin which remains as 2.0.0 Sin...

Although I updated the VLC player to v2.0.1 when it first appeared, I notice that the Firefox plugin remains as v2.0.0

Is this intentional?