cve-2014-2023 - add preliminary note header