GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-7081
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html