shutter -- arbitrary code execution
Luke Farone reports:
In the "Shutter" screenshot application, I discovered that using the
"Show in folder" menu option while viewing a file with a
specially-crafted path allows for arbitrary code execution with the
permissions of the user running Shutter.
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright