Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP header without a name.
https://www.htbridge.com/advisory/HTB23130
https://exchange.xforce.ibmcloud.com/vulnerabilities/81107
http://archives.neohapsis.com/archives/bugtraq/2013-01/0037.html