Find real vulnerabilities before they ship
Vulnerability Database › CVE-2006-5869
pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.