Security fix for CVE-2014-2525

Advisory: http://www.ocert.org/advisories/ocert-2014-003.html