CVE-2010-4167

ImageMagick: configuration files read from $CWD may allow arbitrary code execution

Published Nov 22, 2010 CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-4143 Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.
Ubuntu USN Ubuntu USN USN-1028-1 ImageMagick vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 3:34 AM
Reserved
Nov 4, 2010, 12:00 AM
Status
Modified
Published
Nov 22, 2010, 8:00 PM
Modified
Jun 16, 2026, 11:24 PM
Severity
Low
Public date
Oct 30, 2010, 12:00 AM