Vulnerability found in 2009.