Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.
http://www.vupen.com/english/advisories/2005/0651
http://www.peercast.org/forum/viewtopic.php?p=11596
http://www.gentoo.org/security/en/glsa/glsa-200506-15.xml