CVE-2007-5159
OS incorrectly installs a program with setuid privileges, allowing users to gain privileges.
CVE-2008-4638
Composite: application running with high privileges (CWE-250) allows user to specify a restricted file to process, which generates a parsing error that leaks the contents of the file (CWE-209).