ffmpeg 0.6.x is no longer maintained upstream. There are plenty of security bugs unpatched in the current version.

Solution:

- Upgrade to 0.7.x branch

or

- Import patches from debian?

(from redmine: issue id 1165, created on 2012-05-15, closed on 2012-07-03)