The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5118