size field that is inconsistent with packet size leads to buffer over-read
CVE-2008-2309
product uses a denylist to identify potentially dangerous content, allowing attacker to bypass a warning
CVE-2008-3494