Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference.
https://exchange.xforce.ibmcloud.com/vulnerabilities/18908
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1089
http://www.redhat.com/support/errata/RHSA-2005-512.html