Description burn allows file names to escape via mishandled quotation marks References https://security-tracker.debian.org/tracker/CVE-2009-5043