GNU : Security Vulnerabilities, CVEs, Published In February 2006 (Denial of service)

Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.