GTK interface runs as root and allows arbitrary code execution via the GTK_MODULES environmental variable.

[Zubin Mithra]

The issue was reported here, http://www.openwall.com/lists/oss-security/2011/08/16/2
Ubuntu versions affected seem to be http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2922.html

[Zubin Mithra (zubin-mithra)]

suggesting removal of the package from the repository due to the following reasons :-

[ ] Its a setuid GTK binary, http://www.gtk.org/setuid.html
[ ] Its not maintained anymore
[ ] Correcting 2011-2922 would require a huge about of code-rewrite
[ ] exploiting the vulnerability is not too complicated.

The codebase basically seems to have design security issues, which would make it pretty time-consuming to fix.