VLC is a fully used player because of it massive amounts of codecs, and the new version has a major security flaw.
The problem can be exploited to a point where it compromises a person system,
as it leaves it wide open for a malicious user to run arbitrary code.
Version 0.8.6d was supposedly fix but for some reason it passed testing even though the patch didn't work.
I'm kinda glad I removed it when I did.