libConfuse Memory Leak Vulnerability

libConfuse is a configuration file parser library written in C. It can be used for a variety of purposes. A memory leak vulnerability exists in the configinit file in the configure.c file in libConfuse version 3.2.2. No details of the vulnerability are provided at this time...

Design/Logic Flaw

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCOREINSTALLEDSUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory...

CVE-2010-4167

ImageMagick flaw CVE-2010-4167: Untrusted search path in configure.c allows local privilege escalation when MAGICKCORE_INSTALLED_SUPPORT is defined via a Trojan horse config file in the CWD. Affected: ImageMagick prior to 6.6.5-5. Remediation: upgrade to 6.6.5-5 or newer (as referenced in linked ...