The host is installed with Subversion 1.0.0 before 1.5.7 or 1.6.x before 1.6.4 and is prone to a heap based buffer overflow vulnerability. A flaw is present in the application, which fails to handle an svndiff stream with large windows. Successful exploitation could allow attackers to execute arbitrary commands.