Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
https://web.archive.org/web/20140701023922/http://www.oberhumer.com/opensource/lzo/