CVE-2010-4167: ImageMagick

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

Affected products

• ImageMagick ImageMagick: up to and including 6.6.5-4; version 6.3.1-6 only; version 6.3.1-7 only; version 6.3.2 only; version 6.3.2-1 only; version 6.3.2-2 only; …

Published 2010-11-22. Last modified 2026-06-16.