to Bugtraq list:
securityfocus.com/archive/1/49 ...

An interesting reply posted to the same security mailing list:
seclists.org/bugtraq/2008/Dec/ ...

I.e. launching an external program is reportedly not possible?

This vulnerability has been later assigned as
securityfocus.com/bid/32997/in ...