Lucene search
Ubuntu.comUB:CVE-2010-4167HistoryNov 22, 2010 - 12:00 a.m.
CVE-2010-4167
2010-11-2200:00:00
ubuntu.com
ubuntu.com
20
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
10.1%
Untrusted search path vulnerability in configure.c in ImageMagick before
6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users
to gain privileges via a Trojan horse configuration file in the current
working directory.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601824>
- <https://bugzilla.redhat.com/show_bug.cgi?id=652860>
Notes
| Author | Note |
|---|---|
| mdeslaur | PoC in debian bug. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | imagemagick | < 7:6.3.7.9.dfsg1-2ubuntu1.2 | UNKNOWN |
| ubuntu | 9.10 | noarch | imagemagick | < 7:6.5.1.0-1.1ubuntu3.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | imagemagick | < 7:6.5.7.8-1ubuntu1.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | imagemagick | < 7:6.6.2.6-1ubuntu1.1 | UNKNOWN |
Related
nessus
nessus
Fedora 13 : ImageMagick-6.5.8.10-7.fc13 (2010-19056)
2010-12-27 00:00:00
RHEL 5 : ImageMagick (RHSA-2012:0301)
2012-02-21 00:00:00
openvas
openvas
Ubuntu Update for imagemagick vulnerability USN-1028-1
2010-12-23 00:00:00
Fedora Update for ImageMagick FEDORA-2010-19056
2010-12-28 00:00:00
RedHat Update for ImageMagick RHSA-2012:0301-03
2012-02-21 00:00:00
cve
cve
CVE-2010-4167
2010-11-22 20:00:03
cvelist
cvelist
CVE-2010-4167
2010-11-22 19:00:00
redhat
redhat
(RHSA-2012:0301) Low: ImageMagick security and bug fix update
2012-02-21 00:00:00
(RHSA-2012:0544) Moderate: ImageMagick security update
2012-05-07 00:00:00
securityvulns
securityvulns
[USN-1028-1] ImageMagick vulnerability
2010-12-09 00:00:00
ImageMagic code execution
2010-12-09 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: ImageMagick-6.5.8.10-7.fc13
2010-12-26 19:55:07
[SECURITY] Fedora 14 Update: ImageMagick-6.6.4.1-15.fc14
2010-12-23 19:56:59
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:51:07
prion
prion
Design/Logic Flaw
2010-11-22 20:00:00
debiancve
debiancve
CVE-2010-4167
2010-11-22 20:00:03
ubuntu
ubuntu
ImageMagick vulnerability
2010-12-07 00:00:00
nvd
nvd
CVE-2010-4167
2010-11-22 20:00:03
oraclelinux
oraclelinux
ImageMagick security and bug fix update
2012-03-01 00:00:00
ImageMagick security update
2012-05-07 00:00:00
amazon
amazon
Medium: ImageMagick
2012-05-08 23:14:00
centos
centos
ImageMagick security update
2012-05-07 22:49:25
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
0
Percentile
10.1%
Related for UB:CVE-2010-4167