CVE-2009-5029

Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.

Date published : 2013-05-02

https://bugzilla.redhat.com/show_bug.cgi?id=761245

http://lists.grok.org.uk/pipermail/full-disclosure/2011-December/084452.html