Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.
https://bugs.gentoo.org/show_bug.cgi?id=103555
http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txt
http://www.securityfocus.com/bid/14652
http://www.mandriva.com/security/advisories?name=MDKSA-2005:158