This is not the first time a major flaw has been detected in the media. This flaw affects users on the 3.0.7 build of the app. In the meanwhile, if you are still worried, the only option is to uninstall VLC from your devices and switch to an alternative till the fix arrives. It’s the usual people who don’t check their facts. The patch is about 60 complete and will be pushed once complete. People are saying, ‘You need to uninstall VLC’. Reacting on the press reports that claimed VLC media player is vulnerable, Kempf said: “It’s insane. The related entry in VideoLAN’s public bug tracker also lists the issue as fixed. The VLC issue has now been downgraded from a 9.8 to a 5.5 vulnerability score on the National Vulnerability Database specifying that the “Victim must voluntarily interact with attack mechanism”. VLC since version 3.0.3 has the correct version shipped, and did not even check their claim. IMPORTANT: On the ‘Chose Components Screen’, clear the check box for all components except ‘Media player (required)’. Select a language and click through to the ‘Chose Components Screen’. Tl dr: the issue is in a 3rd party library, called libebml, which was fixed more than 16 months ago. Download VLC media player, save it to your desktop and start the installation program running. It also added VLC since version 3.0.3 has the corrected version, and MITRE’s claim was based on a previous outdated version of VLC.Ībout the 'security issue' on #VLC : VLC is not vulnerable. According to the makers of VLC, the issue was in a 3rd party library called “libebml”, which was fixed more than 16 months ago. Earlier this morning, VideoLAN took to Twitter to clarify that VLC is not vulnerable as reported by CERT-Bund.

What is team what is vlc media player