It's in the post:
a specially constructed file can result in arbitrary code execution a specially constructed file can result in arbitrary code executionNo comments yet.