Buffer overflow in ListCtrl.ocx AddColumn().
vulners.com/securityvulns/securityvulns:doc:19462
vulners.com/securityvulns/securityvulns:doc:19535