GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7208
Reference (s):
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- FULLDISC:20141218 SEC Consult SA-20141218-1 :: OS command execution vulnerability in GParted
- URL: http://seclists.org/fulldisclosure/2014/Dec/77