The software does not necessarily need to be written in C ( or C++) for these elementary security holes to happen.