CVE-2014-3441 on Ubuntu 12.04 LTS (precise) - medium.
Description:
codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file.