Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.Referenceshttp://www.debian.org/security/2003/dsa-378