Debian Security Advisory DSA 1005-1 – Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. xine-lib includes a local copy of libavcodec.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44786/dsa-1005-1.txt
Source: https://packetstormsecurity.com/files/44786/Debian-Linux-Security-Advisory-1005-1.html