Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-02
https://exchange.xforce.ibmcloud.com/vulnerabilities/25196
http://www.vupen.com/english/advisories/2006/0955
http://www.securityfocus.com/bid/17095
http://www.novell.com/linux/security/advisories/2006_26_sr.html
http://secunia.com/advisories/22932