Remote code execution vulnerability in VLC remains unpatched