Libavcodec in FFmpeg prior to 0.11 allows remote malicious users to execute arbitrary code via a crafted QT file.
ffmpeg ffmpeg