I only stumbled on this by accident in a Hacker News thread. Very cool! :-)
In monitoring the Shellshock attacks we’ve blocked, we’ve actually seen someone attempting precisely that attack. So, if you run a web server and suddenly find an ejected DVD it might be an indication that your machine is vulnerable to Shellshock.