buffer overflow vulnerability in code dealing with user generated data and a complex file format.