Buffer overflow on DTHELPUSERSEARCHPATH/LOGNAME variable parsing.
vulners.com/securityvulns/securityvulns:doc:5353
vulners.com/securityvulns/securityvulns:doc:6672