Bugs allow denial-of-service, user impersonation, user tracking, and fraud attacks, two separate reports warn.
( read original story …)