Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer (2) Real demuxer and (3) Cinepak codec which triggers a buffer overflow.