Yep, there are bad bugs for example in mod_perl which is written in C and takes the interpreted Perl code and runs it in the Apache context. I think this is what the OP "heard about". But that is not the fault of Perl itself.