Specially crafted ogg files could cause a heap-based buffer
overflow in the vorbis audio compression library that could
potentially be exploited by attackers to cause a crash or
execute arbitrary code (CVE-2012-0444).