CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
10.1%
It was discovered that ImageMagick would search for configuration files in
the current directory. If a user were tricked into opening or processing an
image in an arbitrary directory, a local attacker could execute arbitrary
code with the user’s privileges.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 9.10 | noarch | imagemagick | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | imagemagick-dbg | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | libmagick++-dev | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | libmagick++2 | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | libmagickcore-dev | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | libmagickcore2 | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | libmagickwand-dev | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | libmagickwand2 | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 9.10 | noarch | perlmagick | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
Ubuntu | 8.04 | noarch | imagemagick | < 7:6.3.7.9.dfsg1-2ubuntu1.2 | UNKNOWN |