fix for CVE-2010-0001