The report also says that the download buttons in Videolan, the official website of VLC Player takes you to the legitimate but outdated VLC 2.1.0 page which is vulnerable to DLL Hijacking.