Alex Infuehr discovered a directory traversal vulnerability which could result in the execution of Python script code when opening a malformed document.