Buffer overflow on PE .Net format parsing, buffer overflow in KIT compiler, remote information leak in ASP.NET with poisoned NULL byte.
vulners.com/securityvulns/securityvulns:doc:17445
vulners.com/securityvulns/securityvulns:doc:17448
vulners.com/securityvulns/securityvulns:doc:20397