From the Videolan advisories [1, 2]:
Summary : Buffer overflows in freetype renderer and HTML subtitle parser
When parsing a specially crafted file, a buffer overflow might occur.
If successful, a malicious third party could trigger an invalid memory access, leading to a crash of VLC or arbitratry code execution.
Summary : Buffer Overflow in ASF Demuxer
When parsing a specially crafted ASF movie, a buffer overflow might occur.
If successful, a malicious third party could trigger an invalid memory access, leading to a crash of VLC media player's process. In some cases attackers might exploit this issue to execute arbitrary code within the context of the application but this information is not confirmed. | 