Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instability) via certain invalid strings in the URL attribute of an ENCLOSURE element as demonstrated by a \%s\ sequence a \%Y\ sequence a \%%\ sequence and an \n \ sequence.