CVEvulnerability
CVE-2010-4167
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-11-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.
Affected configurations
• imagemagick imagemagick (<= 6.6.5-4)
• imagemagick imagemagick 6.3.1-6
• imagemagick imagemagick 6.3.1-7
• imagemagick imagemagick 6.3.2
• imagemagick imagemagick 6.3.2-1
• imagemagick imagemagick 6.3.2-2
• imagemagick imagemagick 6.3.2-3
• imagemagick imagemagick 6.3.2-4
• imagemagick imagemagick 6.3.2-5
• imagemagick imagemagick 6.3.2-6
• imagemagick imagemagick 6.3.2-7
• imagemagick imagemagick 6.3.2-8
• imagemagick imagemagick 6.3.3
• imagemagick imagemagick 6.3.3-1
• imagemagick imagemagick 6.3.3-2
• imagemagick imagemagick 6.3.3-3
• imagemagick imagemagick 6.3.3-4
• imagemagick imagemagick 6.3.3-5
• imagemagick imagemagick 6.3.3-6
• imagemagick imagemagick 6.3.3-7
• imagemagick imagemagick 6.3.3-8
• imagemagick imagemagick 6.3.3-9
• imagemagick imagemagick 6.3.4
• imagemagick imagemagick 6.3.4-1
• imagemagick imagemagick 6.3.4-2
• imagemagick imagemagick 6.3.4-3
• imagemagick imagemagick 6.3.4-4
• imagemagick imagemagick 6.3.4-5
• imagemagick imagemagick 6.3.4-6
• imagemagick imagemagick 6.3.4-8
• imagemagick imagemagick 6.3.4-9
• imagemagick imagemagick 6.3.4-10
• imagemagick imagemagick 6.3.5
• imagemagick imagemagick 6.3.5-4
• imagemagick imagemagick 6.3.5-5
• imagemagick imagemagick 6.3.5-6
• imagemagick imagemagick 6.3.5-7
• imagemagick imagemagick 6.3.5-9
• imagemagick imagemagick 6.3.5-10
• imagemagick imagemagick 6.3.6
• imagemagick imagemagick 6.3.6-1
• imagemagick imagemagick 6.3.6-2
• imagemagick imagemagick 6.3.6-3
• imagemagick imagemagick 6.3.6-4
• imagemagick imagemagick 6.3.6-5
• imagemagick imagemagick 6.3.6-6
• imagemagick imagemagick 6.3.6-7
• imagemagick imagemagick 6.3.6-8
• imagemagick imagemagick 6.3.6-9
• imagemagick imagemagick 6.3.6-10
• imagemagick imagemagick 6.3.7
• imagemagick imagemagick 6.3.7-1
• imagemagick imagemagick 6.3.7-2
• imagemagick imagemagick 6.3.7-3
• imagemagick imagemagick 6.3.7-4
• imagemagick imagemagick 6.3.7-5
• imagemagick imagemagick 6.3.7-7
• imagemagick imagemagick 6.3.7-9
• imagemagick imagemagick 6.3.7-10
• imagemagick imagemagick 6.3.8
… and 266 more
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601824 bugs.debian.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052515.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052599.html lists.fedoraproject.org
- http://rhn.redhat.com/errata/RHSA-2012-0544.html rhn.redhat.com
- http://secunia.com/advisories/42497 secunia.com
- http://secunia.com/advisories/42744 secunia.com
- http://secunia.com/advisories/48100 secunia.com
- http://secunia.com/advisories/49063 secunia.com
- http://www.imagemagick.org/script/changelog.php www.imagemagick.org
- http://www.openwall.com/lists/oss-security/2010/11/13/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/11/15/3 www.openwall.com
- http://www.securityfocus.com/bid/45044 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1028-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/3150 www.vupen.com
- http://www.vupen.com/english/advisories/2010/3322 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=652860 bugzilla.redhat.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601824 bugs.debian.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052515.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052599.html lists.fedoraproject.org
- http://rhn.redhat.com/errata/RHSA-2012-0544.html rhn.redhat.com
- http://secunia.com/advisories/42497 secunia.com
- http://secunia.com/advisories/42744 secunia.com
- http://secunia.com/advisories/48100 secunia.com
- http://secunia.com/advisories/49063 secunia.com
- http://www.imagemagick.org/script/changelog.php www.imagemagick.org
- http://www.openwall.com/lists/oss-security/2010/11/13/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2010/11/15/3 www.openwall.com
- http://www.securityfocus.com/bid/45044 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1028-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2010/3150 www.vupen.com
- http://www.vupen.com/english/advisories/2010/3322 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=652860 bugzilla.redhat.com