See how greenwoodsoftware compares to other vendors in security performance
less could allow a remote attacker to execute arbitrary commands on the system. By using a newline character in the name of a file, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE.