Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP header without a name. Per http://cwe.mitre.org/data/definitions/476.html
"CWE-476: NULL Pointer Dereference"
Publication date: Fri, 30 May 2014 19:55:00 +0000