Debian Linux Security Advisory 2159-1 - Dan Rosenberg discovered that insufficient input validation in VLC's processing of Matroska/WebM containers could lead to the execution of arbitrary code.
162e194fa0f6d5d2e7b92168845c50bf3221387503cc43cd07a7f40896e1b08a