Apache Log4j 1.2 could be made to crash or run programs if it received specially crafted input.