The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data.
http://www.ffmpeg.org/security.html
http://www.debian.org/security/2014/dsa-2855
http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=1285baaab550e3e761590ef6dfb1d9bd9d1332e4