NetSight
IP …
medium6.9

CVE-2010-4167

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain priv…

Impact

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
through 6.6.5-4
Versions 6.3.1-6, 6.3.1-7, 6.3.2, 6.3.2-1, 6.3.2-2

References