UpHeron
All vulnerabilities

Servers and applications

CVE-2010-4167

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

Severity
Medium 6.9
Published
22 Nov 2010
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.4% in the next 30 daysHigher than 29% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Needs local access · No login needed
Attacker can
Read data · Change data · Take it down
CVSS vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Sources
NVD

Affected software

SoftwareAffected versions
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick
  • Version 6.6.5-3
  • Version 6.6.5-2
  • Version 6.6.5-1
  • Version 6.6.5
All 326 release lines
  • Every version up to 6.6.5-4
  • Version 6.3.1-6
  • Version 6.3.1-7
  • Version 6.3.2
  • Version 6.3.2-1
  • Version 6.3.2-2
  • Version 6.3.2-3
  • Version 6.3.2-4
  • Version 6.3.2-5
  • Version 6.3.2-6
  • Version 6.3.2-7
  • Version 6.3.2-8
  • Version 6.3.3
  • Version 6.3.3-1
  • Version 6.3.3-2
  • Version 6.3.3-3
  • Version 6.3.3-4
  • Version 6.3.3-5
  • Version 6.3.3-6
  • Version 6.3.3-7
  • Version 6.3.3-8
  • Version 6.3.3-9
  • Version 6.3.4
  • Version 6.3.4-1
  • Version 6.3.4-2
  • Version 6.3.4-3
  • Version 6.3.4-4
  • Version 6.3.4-5
  • Version 6.3.4-6
  • Version 6.3.4-8
  • Version 6.3.4-9
  • Version 6.3.4-10
  • Version 6.3.5
  • Version 6.3.5-4
  • Version 6.3.5-5
  • Version 6.3.5-6
  • Version 6.3.5-7
  • Version 6.3.5-9
  • Version 6.3.5-10
  • Version 6.3.6
  • Version 6.3.6-1
  • Version 6.3.6-2
  • Version 6.3.6-3
  • Version 6.3.6-4
  • Version 6.3.6-5
  • Version 6.3.6-6
  • Version 6.3.6-7
  • Version 6.3.6-8
  • Version 6.3.6-9
  • Version 6.3.6-10
  • Version 6.3.7
  • Version 6.3.7-1
  • Version 6.3.7-2
  • Version 6.3.7-3
  • Version 6.3.7-4
  • Version 6.3.7-5
  • Version 6.3.7-7
  • Version 6.3.7-9
  • Version 6.3.7-10
  • Version 6.3.8
  • Version 6.3.8-1
  • Version 6.3.8-2
  • Version 6.3.8-3
  • Version 6.3.8-5
  • Version 6.3.8-6
  • Version 6.3.8-7
  • Version 6.3.8-9
  • Version 6.3.8-10
  • Version 6.3.9
  • Version 6.3.9-1
  • Version 6.3.9-2
  • Version 6.3.9-4
  • Version 6.3.9-5
  • Version 6.3.9-6
  • Version 6.3.9-7
  • Version 6.3.9-8
  • Version 6.3.9-9
  • Version 6.3.9-10
  • Version 6.4.0
  • Version 6.4.0-1
  • Version 6.4.0-4
  • Version 6.4.0-5
  • Version 6.4.0-6
  • Version 6.4.0-7
  • Version 6.4.0-8
  • Version 6.4.0-10
  • Version 6.4.0-11
  • Version 6.4.1
  • Version 6.4.1-1
  • Version 6.4.1-2
  • Version 6.4.1-3
  • Version 6.4.1-4
  • Version 6.4.1-5
  • Version 6.4.1-6
  • Version 6.4.1-7
  • Version 6.4.1-8
  • Version 6.4.1-9
  • Version 6.4.2
  • Version 6.4.2-1
  • Version 6.4.2-2
  • Version 6.4.2-4
  • Version 6.4.2-5
  • Version 6.4.2-6
  • Version 6.4.2-7
  • Version 6.4.2-8
  • Version 6.4.2-9
  • Version 6.4.2-10
  • Version 6.4.3
  • Version 6.4.3-1
  • Version 6.4.3-2
  • Version 6.4.3-3
  • Version 6.4.3-5
  • Version 6.4.3-6
  • Version 6.4.3-7
  • Version 6.4.3-8
  • Version 6.4.3-10
  • Version 6.4.4
  • Version 6.4.4-1
  • Version 6.4.4-3
  • Version 6.4.4-5
  • Version 6.4.4-7
  • Version 6.4.4-8
  • Version 6.4.5
  • Version 6.4.5-1
  • Version 6.4.5-2
  • Version 6.4.5-3
  • Version 6.4.5-4
  • Version 6.4.5-6
  • Version 6.4.5-7
  • Version 6.4.5-9
  • Version 6.4.6
  • Version 6.4.6-1
  • Version 6.4.6-2
  • Version 6.4.6-3
  • Version 6.4.6-4
  • Version 6.4.6-5
  • Version 6.4.6-6
  • Version 6.4.6-8
  • Version 6.4.6-9
  • Version 6.4.7-1
  • Version 6.4.7-2
  • Version 6.4.7-3
  • Version 6.4.7-4
  • Version 6.4.7-5
  • Version 6.4.7-6
  • Version 6.4.7-7
  • Version 6.4.7-8
  • Version 6.4.7-9
  • Version 6.4.7-10
  • Version 6.4.8
  • Version 6.4.8-1
  • Version 6.4.8-2
  • Version 6.4.8-3
  • Version 6.4.8-4
  • Version 6.4.8-5
  • Version 6.4.8-6
  • Version 6.4.8-7
  • Version 6.4.8-8
  • Version 6.4.8-9
  • Version 6.4.8-10
  • Version 6.4.9
  • Version 6.4.9-2
  • Version 6.4.9-3
  • Version 6.4.9-5
  • Version 6.4.9-7
  • Version 6.4.9-8
  • Version 6.4.9-9
  • Version 6.4.9-10
  • Version 6.5.0
  • Version 6.5.0-1
  • Version 6.5.0-2
  • Version 6.5.0-3
  • Version 6.5.0-4
  • Version 6.5.0-5
  • Version 6.5.0-6
  • Version 6.5.0-7
  • Version 6.5.0-8
  • Version 6.5.0-9
  • Version 6.5.0-10
  • Version 6.5.1
  • Version 6.5.1-1
  • Version 6.5.1-2
  • Version 6.5.1-3
  • Version 6.5.1-4
  • Version 6.5.1-5
  • Version 6.5.1-6
  • Version 6.5.1-7
  • Version 6.5.1-9
  • Version 6.5.1-10
  • Version 6.5.2
  • Version 6.5.2-1
  • Version 6.5.2-2
  • Version 6.5.2-3
  • Version 6.5.2-4
  • Version 6.5.2-5
  • Version 6.5.2-6
  • Version 6.5.2-7
  • Version 6.5.2-8
  • Version 6.5.2-9
  • Version 6.5.2-10
  • Version 6.5.3
  • Version 6.5.3-1
  • Version 6.5.3-3
  • Version 6.5.3-4
  • Version 6.5.3-5
  • Version 6.5.3-6
  • Version 6.5.3-7
  • Version 6.5.3-8
  • Version 6.5.3-10
  • Version 6.5.4
  • Version 6.5.4-1
  • Version 6.5.4-2
  • Version 6.5.4-3
  • Version 6.5.4-4
  • Version 6.5.4-5
  • Version 6.5.4-6
  • Version 6.5.4-7
  • Version 6.5.4-8
  • Version 6.5.4-9
  • Version 6.5.4-10
  • Version 6.5.5
  • Version 6.5.5-1
  • Version 6.5.5-2
  • Version 6.5.5-3
  • Version 6.5.5-4
  • Version 6.5.5-5
  • Version 6.5.5-6
  • Version 6.5.5-7
  • Version 6.5.5-8
  • Version 6.5.5-9
  • Version 6.5.5-10
  • Version 6.5.6
  • Version 6.5.6-2
  • Version 6.5.6-3
  • Version 6.5.6-4
  • Version 6.5.6-5
  • Version 6.5.6-6
  • Version 6.5.6-7
  • Version 6.5.6-8
  • Version 6.5.6-9
  • Version 6.5.6-10
  • Version 6.5.7
  • Version 6.5.7-1
  • Version 6.5.7-2
  • Version 6.5.7-3
  • Version 6.5.7-4
  • Version 6.5.7-5
  • Version 6.5.7-6
  • Version 6.5.7-7
  • Version 6.5.7-8
  • Version 6.5.7-9
  • Version 6.5.8
  • Version 6.5.8-1
  • Version 6.5.8-2
  • Version 6.5.8-3
  • Version 6.5.8-4
  • Version 6.5.8-5
  • Version 6.5.8-6
  • Version 6.5.8-7
  • Version 6.5.8-8
  • Version 6.5.8-9
  • Version 6.5.9
  • Version 6.5.9-1
  • Version 6.5.9-2
  • Version 6.5.9-3
  • Version 6.5.9-4
  • Version 6.5.9-5
  • Version 6.5.9-6
  • Version 6.5.9-7
  • Version 6.5.9-8
  • Version 6.5.9-10
  • Version 6.6.0
  • Version 6.6.0-1
  • Version 6.6.0-2
  • Version 6.6.0-4
  • Version 6.6.0-5
  • Version 6.6.0-6
  • Version 6.6.0-7
  • Version 6.6.0-8
  • Version 6.6.0-9
  • Version 6.6.0-10
  • Version 6.6.1
  • Version 6.6.1-1
  • Version 6.6.1-2
  • Version 6.6.1-3
  • Version 6.6.1-4
  • Version 6.6.1-5
  • Version 6.6.1-6
  • Version 6.6.1-7
  • Version 6.6.1-8
  • Version 6.6.1-9
  • Version 6.6.1-10
  • Version 6.6.2
  • Version 6.6.2-1
  • Version 6.6.2-2
  • Version 6.6.2-3
  • Version 6.6.2-4
  • Version 6.6.2-5
  • Version 6.6.2-6
  • Version 6.6.2-7
  • Version 6.6.2-8
  • Version 6.6.2-9
  • Version 6.6.2-10
  • Version 6.6.3
  • Version 6.6.3-1
  • Version 6.6.3-2
  • Version 6.6.3-3
  • Version 6.6.3-4
  • Version 6.6.3-5
  • Version 6.6.3-6
  • Version 6.6.3-7
  • Version 6.6.3-10
  • Version 6.6.4
  • Version 6.6.4-1
  • Version 6.6.4-2
  • Version 6.6.4-4
  • Version 6.6.4-5
  • Version 6.6.4-6
  • Version 6.6.4-7
  • Version 6.6.4-8
  • Version 6.6.4-9
  • Version 6.6.4-10
  • Version 6.6.5
  • Version 6.6.5-1
  • Version 6.6.5-2
  • Version 6.6.5-3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2010-4167
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2010-4167