Comment 10 for bug 275565

Yes, that's correct. The file is corrupt and won't play in any player. However, VLC also runs as a browser plugin so this bug could be used to crash people's browser remotely. It's not at all inconceivable that this bug also opens for remote code execution (if it's some form of buffer or integer overflow for example).