A vulnerability was found in EOG version 2.2.0 and earlier. A carefully
crafted filename passed to the program could lead to the execution of
arbitrary code. An attacker could exploit this because various packages
(Mutt, for example) make use of EOG for image viewing.