Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via an "empty" .MPA file, which triggers a divide-by-zero error.
https://exchange.xforce.ibmcloud.com/vulnerabilities/34299
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-2715
http://www.securityfocus.com/bid/23991
http://www.securityfocus.com/archive/1/468758/100/0/threaded
http://www.securityfocus.com/archive/1/468626/100/0/threaded