A boundary error condition in ArBas 2fax allow for arbitrary code execution. Version 3.04 was found susceptible.