Vulnerability in Imagemagick

CVE-2010-4167

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

EPSS: 0.004 (28.1th percentile) — read the EPSS interpretation.

Affected products

  • Imagemagick — versions 6.3.5-10, 6.4.2-1, 6.5.3-5
  • N/a — versions n/a

References