Debian Security Advisory 1393-1 - It was discovered that xfce-terminal, a terminal emulator for the xfce environment, did not correctly escape arguments passed to the processes spawned by "Open Link". This allowed malicious links to execute arbitrary commands upon the local system.
31be8cc034e77cdfc8024b7182247c9b9c32d51c2d7e9a0014476144661a646e
Ubuntu Security Notice 497-1 - Lasse K
b2e6dc3b638f33a5dd1d846b8cd94a14ec6814f854f1e63005268e5fc66b6eeb
Gentoo Linux Security Advisory GLSA 200708-07 - Lasse Karkkainen discovered that the function terminal_helper_execute() in file terminal-helper.c does not properly escape the URIs before processing. Versions less than 0.2.6_p25931 are affected.
330b4e24fb821b2cd5f7c0a3bd591f92d633d2a9129ad6efcf09f92746b72a12