Mandriva Linux Security Advisory 2009-019 – A vulnerability has been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XPM file. The updated packages have been patched to prevent this.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/74160/MDVSA-2009-019.txt
Source: https://packetstormsecurity.com/files/74160/Mandriva-Linux-Security-Advisory-2009-019.html