Buffer overflow during displaying URLs in .ram, buffer overflow during constructing mem: URLs on error page. Buffer overflows during parsing different file formats.
vulners.com/securityvulns/securityvulns:doc:6335
vulners.com/securityvulns/securityvulns:doc:6336
vulners.com/securityvulns/securityvulns:doc:6343