VideoLAN (VLC) versions 0.8.6d and below suffer from buffer overflow and format string vulnerabilities.