fixes: CVE-2008-2152: Different kinds of manipulated files may lead to heap overflows and arbitrary code execution