User's environment variable is used to launch external application.
vulners.com/securityvulns/securityvulns:doc:12894
vulners.com/securityvulns/securityvulns:doc:16525