Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to an invalid gop header and decoding in a half initialized context. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2779
