4 different buffer overflows.
vulners.com/securityvulns/securityvulns:doc:3294
vulners.com/securityvulns/securityvulns:doc:3295