It's possible to bypass sandbox restriction by controlling different applications.
vulners.com/securityvulns/securityvulns:doc:27304