CVE-2010-4167

2010-11-22T20:00:00
ID CVE-2010-4167
Type cve
Reporter cve@mitre.org
Modified 2018-01-06T02:29:00

Description

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory. Per: http://cwe.mitre.org/data/definitions/426.html

'CWE-426: Untrusted Search Path'