Posted by Henri Salo on Nov 10
As far as I can tell this project is dead and they have no plans to fix security
vulnerabilities. I tried to contact them years ago, but never received any
response. These issues look similar to CVE-2007-1231. Please see:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-1231