flicvideo.c in libavcodec 0.6 and earlier in FFmpeg as used in MPlayer and other products allows remote attackers to execute arbitrary code via a crafted flic file related to an \arbitrary offset dereference vulnerability.\