Red Hat Security AdvisoryRHSA-2012:0301
ImageMagick security and bug fix update
Released 2012-02-21 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ImageMagick-6.2.8.0-12.el5, ImageMagick-6.2.8.0-12.el5.i386, ImageMagick-6.2.8.0-12.el5.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) ImageMagick-6.2.8.0-12.el5, ImageMagick-6.2.8.0-12.el5.i386, ImageMagick-c++-6.2.8.0-12.el5 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) ImageMagick-6.2.8.0-12.el5, ImageMagick-c++-devel-6.2.8.0-12.el5, ImageMagick-c++-devel-6.2.8.0-12.el5.i386 +2
Fixes 1 record
Priority LOW 30
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current w…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00354 · Published 2010-11-22 · Partial fix