[nieve]

It allows full RCE from an uploaded or opened file. That seems reasonably critical to me.

[worthless-trash]

Thats.. in bad faith.

If thats the qualification for "remote" then you can say that every attack is remote and it clearly isnt.

[out_of_protocol]

Does this work with .pdf files? i.e. attacker uploads evil.pdf

[llimllib]

yes, also with .eps files