[stevekemp]

But even there you've got to be careful. For example if you're using GNU Emacs to read your email you could have been vulnerable to arbitrary code execution for the past few years:

https://debbugs.gnu.org/cgi/bugreport.cgi?bug=28350

[CyberShadow]

The vulnerability is in the handling of text/enriched parts - not quite text/plain.