A vulnerability in Cisco's video codec OpenH264 allows attackers to smuggle in malicious code. Firefox is also at risk.