CVE-2009-0566
chain: incorrect calculations lead to incorrect pointer dereference and memory corruption
CVE-2009-1350
product accepts crafted messages that lead to a dereference of an arbitrary pointer