<p>Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file</p>