Buffer overflow in qDecoder library 5.08 and earlier as used in CrazyWWWBoard CrazySearch and other CGI programs allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.