Fix security bug: Remote Code Execution
Thanks to Craig Arendt of Stratum Security for reporting the bug.

http://www.cert.org/ issue VU#683268