A boundary error condition in the put_words() function of abcm2ps version 3.7.20 allows for arbitrary code execution.