Comment 4 for bug 1199783

Sounds like this needs a CVE. Thierry ok if I assign one?