Buffer overflow on .MSWMM files parsing.
vulners.com/securityvulns/securityvulns:doc:23330
vulners.com/securityvulns/securityvulns:doc:23333