Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vectors relating to (1) \print floats\ and (2) a missing null termination in the \rope constructor.\