pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pstotext | Pstotext | 1.9 (including) | 1.9 (including) |
| Pstotext | Ubuntu | dapper | * |
| Pstotext | Ubuntu | edgy | * |