Service crash via overflowed Dxtory size check

Integer coercion in FFmpeg 2.0's Dxtory decoder allows remote attackers to crash media-processing services with a crafted AVI file. The source-size checks multiply attacker-controlled frame dimensions using narrow integer arithmetic, allowing overflow to accept an undersized packet before the decoder reads beyond its input buffer. Exploitation requires the target to decode the crafted Dxtory stream; the resulting out-of-bounds read crashes the decoding process, with no reported data disclosure or modification.