Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified vectors related to "parsing of http headers."
https://exchange.xforce.ibmcloud.com/vulnerabilities/43187
http://www.securityfocus.com/bid/29809
http://sourceforge.net/project/shownotes.php?release_id=607827