CVE-2008-5021
chain: race condition allows attacker to access an object while it is still being initialized, causing software to access uninitialized memory.
CVE-2009-4895
chain: race condition for an argument value, possibly resulting in NULL dereference