Oval Definition:	oval:org.mitre.oval:tst:32140
Comment: netpbm is earlier than 0:10.25-2.EL4.1 Type: rpminfo_test Namespace: linux Check_Existence: at_least_one_exists Check: at least one State Operator: AND References Object: oval:org.mitre.oval:obj:14185 State: oval:org.mitre.oval:ste:10012 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:11645 V pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands. 2013-04-29
BACK