Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI.
https://exchange.xforce.ibmcloud.com/vulnerabilities/55974
http://www.securityfocus.com/archive/1/509194/100/0/threaded