[rsync]

"But rendering a font gives execution with your user"

Would you point us to a reference, or a further explanation for this claim ? I am genuinely interested...

[txutxu]

Sure, it was just an example...

http://securitytracker.com/id/1024283