Launchpad.net

CVE 2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.

See the CVE page on Mitre.org for more details.