add CVE-2014-7206 to 1.0.9.2