A vulnerability has been reported in NetPBM, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error within the "xpmtoppm" utility when processing certain XPM files, which can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into converting a specially crafted XPM file.

The vulnerability is reported in versions prior to 10.35.72.

Solution
Update to version 10.35.72.

Provided and/or discovered by
Marc Schoenefeld, Red Hat

Original Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=546580

Deep Links
Links available to Secunia VIM customers