Apport blindly uses the python eval () function on an unsanitized field (CrashDB) inside the .crash file. This leads directly to arbitrary python code execution.

I know many other languages use the eval() function to take a string argument and evaluate it as part of the source code (so you can run a function or assign a variable etc). I've seen it in PHP, ...

Writing GUI programs involves two basic steps. First, you need to write the code to create the interface, with elements, such as menus, and widgets, such as buttons, labels and entry fields. You then ...