Three integer overflows on video files parsing lead to buffer overflow.
vulners.com/securityvulns/securityvulns:doc:20621