Ultrafunk Popcorn 1.20 allows remote malicious users to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037.
ultrafunk popcorn 1.20