CVE-2010-4167
N/A
Published: November 22, 2010 at 07:00 PM UTC
Updated: June 16, 2026 at 11:24 PM UTC
1 product affected across 1 vendorImageMagick
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 6.6.5-46.3.1-66.3.1-76.3.26.3.2-16.3.2-26.3.2-36.3.2-46.3.2-56.3.2-66.3.2-76.3.2-86.3.36.3.3-16.3.3-26.3.3-36.3.3-46.3.3-56.3.3-66.3.3-76.3.3-86.3.3-96.3.46.3.4-16.3.4-106.3.4-26.3.4-36.3.4-46.3.4-56.3.4-66.3.4-86.3.4-96.3.56.3.5-106.3.5-46.3.5-56.3.5-66.3.5-76.3.5-96.3.66.3.6-16.3.6-106.3.6-26.3.6-36.3.6-46.3.6-56.3.6-66.3.6-76.3.6-86.3.6-96.3.76.3.7-16.3.7-106.3.7-26.3.7-36.3.7-46.3.7-56.3.7-76.3.7-96.3.86.3.8-16.3.8-106.3.8-26.3.8-36.3.8-56.3.8-66.3.8-76.3.8-96.3.96.3.9-16.3.9-106.3.9-26.3.9-46.3.9-56.3.9-66.3.9-76.3.9-86.3.9-96.4.06.4.0-16.4.0-106.4.0-116.4.0-46.4.0-56.4.0-66.4.0-76.4.0-86.4.16.4.1-16.4.1-26.4.1-36.4.1-46.4.1-56.4.1-66.4.1-76.4.1-86.4.1-96.4.26.4.2-16.4.2-106.4.2-26.4.2-46.4.2-56.4.2-66.4.2-76.4.2-86.4.2-96.4.36.4.3-16.4.3-106.4.3-26.4.3-36.4.3-56.4.3-66.4.3-76.4.3-86.4.46.4.4-16.4.4-36.4.4-56.4.4-76.4.4-86.4.56.4.5-16.4.5-26.4.5-36.4.5-46.4.5-66.4.5-76.4.5-96.4.66.4.6-16.4.6-26.4.6-36.4.6-46.4.6-56.4.6-66.4.6-86.4.6-96.4.7-16.4.7-106.4.7-26.4.7-36.4.7-46.4.7-56.4.7-66.4.7-76.4.7-86.4.7-96.4.86.4.8-16.4.8-106.4.8-26.4.8-36.4.8-46.4.8-56.4.8-66.4.8-76.4.8-86.4.8-96.4.96.4.9-106.4.9-26.4.9-36.4.9-56.4.9-76.4.9-86.4.9-96.5.06.5.0-16.5.0-106.5.0-26.5.0-36.5.0-46.5.0-56.5.0-66.5.0-76.5.0-86.5.0-96.5.16.5.1-16.5.1-106.5.1-26.5.1-36.5.1-46.5.1-56.5.1-66.5.1-76.5.1-96.5.26.5.2-16.5.2-106.5.2-26.5.2-36.5.2-46.5.2-56.5.2-66.5.2-76.5.2-86.5.2-96.5.36.5.3-16.5.3-106.5.3-36.5.3-46.5.3-56.5.3-66.5.3-76.5.3-86.5.46.5.4-16.5.4-106.5.4-26.5.4-36.5.4-46.5.4-56.5.4-66.5.4-76.5.4-86.5.4-96.5.56.5.5-16.5.5-106.5.5-26.5.5-36.5.5-46.5.5-56.5.5-66.5.5-76.5.5-86.5.5-96.5.66.5.6-106.5.6-26.5.6-36.5.6-46.5.6-56.5.6-66.5.6-76.5.6-86.5.6-96.5.76.5.7-16.5.7-26.5.7-36.5.7-46.5.7-56.5.7-66.5.7-76.5.7-86.5.7-96.5.86.5.8-16.5.8-26.5.8-36.5.8-46.5.8-56.5.8-66.5.8-76.5.8-86.5.8-96.5.96.5.9-16.5.9-106.5.9-26.5.9-36.5.9-46.5.9-56.5.9-66.5.9-76.5.9-86.6.06.6.0-16.6.0-106.6.0-26.6.0-46.6.0-56.6.0-66.6.0-76.6.0-86.6.0-96.6.16.6.1-16.6.1-106.6.1-26.6.1-36.6.1-46.6.1-56.6.1-66.6.1-76.6.1-86.6.1-96.6.26.6.2-16.6.2-106.6.2-26.6.2-36.6.2-46.6.2-56.6.2-66.6.2-76.6.2-86.6.2-96.6.36.6.3-16.6.3-106.6.3-26.6.3-36.6.3-46.6.3-56.6.3-66.6.3-76.6.46.6.4-16.6.4-106.6.4-26.6.4-46.6.4-56.6.4-66.6.4-76.6.4-86.6.4-96.6.56.6.5-16.6.5-26.6.5-3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (16)
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052515.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052599.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-0544.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card