system
Describe <CVE-2005-0638>.
user
What is <CVE-2005-0638>?
assistant
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command..