CVE-2009-4495 — Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite file — CVE Database · The Intelligence Room