The folks at VideoLAN have released a new version of their player to fix a couple of security issues.

VLC media player versions 0.7.0 to 0.8.6 suffer from a Format String security vulnerability in the CDDA and VCDX modules.

It can be exploited if you use VLC as a broswer plugin. Advisory here, updated safe windows version here. promoted forum item