http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2629
Not sure if this poses any real danger in practice, but still -- better be safe than sorry.