That means something disguised as a harmless image with the right MIME type but ending in .exe could be executed as a program - if the user clicks it. "A maliciously crafted mismatch could have ...