CVE-2007-4268
Chain: integer signedness error (CWE-195) passes signed comparison, leading to heap overflow (CWE-122)
CVE-2009-2550
Classic stack-based buffer overflow in media player using a long entry in a playlist