The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via heap corruption.
https://exchange.xforce.ibmcloud.com/vulnerabilities/20094
http://www.securityfocus.com/bid/13146
http://www.gentoo.org/security/en/glsa/glsa-200504-11.xml
http://www.debian.org/security/2005/dsa-713