The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.
{ "urgency": "not yet assigned" }
{ "urgency": "medium" }