Integer overflow in dynamic memory allocation routines.
vulners.com/securityvulns/securityvulns:doc:14564
vulners.com/securityvulns/securityvulns:doc:14565