Dashboard buffer overflow during fonts parsing allows load and execute any code.
vulners.com/securityvulns/securityvulns:doc:4784