{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated ImageMagick packages that fix one security issue and multiple bugs\nare now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.", "title": "Topic" }, { "category": "general", "text": "ImageMagick is an image display and manipulation tool for the X Window\nSystem that can read and write multiple image formats.\n\nIt was found that ImageMagick utilities tried to load ImageMagick\nconfiguration files from the current working directory. If a user ran an\nImageMagick utility in an attacker-controlled directory containing a\nspecially-crafted ImageMagick configuration file, it could cause the\nutility to execute arbitrary code. (CVE-2010-4167)\n\nThis update also fixes the following bugs:\n\n* Previously, the \"identify -verbose\" command failed with an assertion if\nthere was no image information available. An upstream patch has been\napplied, so that GetImageOption() is now called correctly. Now, the\n\"identify -verbose\" command works correctly even if no image information is\navailable. (BZ#502626)\n\n* Previously, an incorrect use of the semaphore data type led to a\ndeadlock. As a consequence, the ImageMagick utility could become\nunresponsive when converting JPEG files to PDF (Portable Document Format)\nfiles. A patch has been applied to address the deadlock issue, and JPEG\nfiles can now be properly converted to PDF files. (BZ#530592)\n\n* Previously, running the \"convert\" command with the \"-color\" option failed\nwith a memory allocation error. The source code has been modified to fix\nproblems with memory allocation. Now, using the \"convert\" command with the\n\"-color\" option works correctly. (BZ#616538)\n\n* Previously, ImageMagick could become unresponsive when using the\n\"display\" command on damaged GIF files. The source code has been revised to\nprevent the issue. ImageMagick now produces an error message in the\ndescribed scenario. A file selector is now opened so the user can choose\nanother image to display. (BZ#693989)\n\n* Prior to this update, the \"convert\" command did not handle rotated PDF\nfiles correctly. As a consequence, the output was rendered as a portrait\nwith the content being cropped. With this update, the PDF render geometry\nis modified, and the output produced by the \"convert\" command is properly\nrendered as a landscape. (BZ#694922)\n\nAll users of ImageMagick are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues. All running\ninstances of ImageMagick must be restarted for this update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2012:0301", "url": "https://access.redhat.com/errata/RHSA-2012:0301" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "580535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=580535" }, { "category": "external", "summary": "652860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=652860" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0301.json" } ], "title": "Red Hat Security Advisory: ImageMagick security and bug fix update", "tracking": { "current_release_date": "2026-06-25T10:38:08+00:00", "generator": { "date": "2026-06-25T10:38:08+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.1.0" } }, "id": "RHSA-2012:0301", "initial_release_date": "2012-02-21T02:21:00+00:00", "revision_history": [ { "date": "2012-02-21T02:21:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2012-02-21T02:24:31+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-25T10:38:08+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-perl-0:6.2.8.0-12.el5.i386", "product": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.i386", "product_id": "ImageMagick-perl-0:6.2.8.0-12.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-perl@6.2.8.0-12.el5?arch=i386" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=i386" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.i386", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.i386", "product_id": "ImageMagick-0:6.2.8.0-12.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=i386" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.i386", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.i386", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=i386" } } }, { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=i386" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.i386", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.i386", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=i386" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "product": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "product_id": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-perl@6.2.8.0-12.el5?arch=x86_64" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=x86_64" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.x86_64", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.x86_64", "product_id": "ImageMagick-0:6.2.8.0-12.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=x86_64" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=x86_64" } } }, { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=x86_64" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.src", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.src", "product_id": "ImageMagick-0:6.2.8.0-12.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=ia64" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=ia64" } } }, { "category": "product_version", "name": "ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "product": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "product_id": "ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-perl@6.2.8.0-12.el5?arch=ia64" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=ia64" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=ia64" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.ia64", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.ia64", "product_id": "ImageMagick-0:6.2.8.0-12.el5.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=ia64" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=ppc64" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=ppc64" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=ppc64" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=ppc64" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.ppc64", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.ppc64", "product_id": "ImageMagick-0:6.2.8.0-12.el5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=ppc64" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=ppc" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=ppc" } } }, { "category": "product_version", "name": "ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "product": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "product_id": "ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-perl@6.2.8.0-12.el5?arch=ppc" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=ppc" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=ppc" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.ppc", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.ppc", "product_id": "ImageMagick-0:6.2.8.0-12.el5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=ppc" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=s390x" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=s390x" } } }, { "category": "product_version", "name": "ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "product": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "product_id": "ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-perl@6.2.8.0-12.el5?arch=s390x" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=s390x" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=s390x" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.s390x", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.s390x", "product_id": "ImageMagick-0:6.2.8.0-12.el5.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "product": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "product_id": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel@6.2.8.0-12.el5?arch=s390" } } }, { "category": "product_version", "name": "ImageMagick-devel-0:6.2.8.0-12.el5.s390", "product": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.s390", "product_id": "ImageMagick-devel-0:6.2.8.0-12.el5.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-devel@6.2.8.0-12.el5?arch=s390" } } }, { "category": "product_version", "name": "ImageMagick-c++-0:6.2.8.0-12.el5.s390", "product": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.s390", "product_id": "ImageMagick-c++-0:6.2.8.0-12.el5.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B@6.2.8.0-12.el5?arch=s390" } } }, { "category": "product_version", "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "product": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "product_id": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick-debuginfo@6.2.8.0-12.el5?arch=s390" } } }, { "category": "product_version", "name": "ImageMagick-0:6.2.8.0-12.el5.s390", "product": { "name": "ImageMagick-0:6.2.8.0-12.el5.s390", "product_id": "ImageMagick-0:6.2.8.0-12.el5.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/ImageMagick@6.2.8.0-12.el5?arch=s390" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-0:6.2.8.0-12.el5.src" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.src", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)", "product_id": "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client-Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-0:6.2.8.0-12.el5.src" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.src", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.ia64" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc64" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.s390" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.s390x" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.src" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.src", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ia64" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc64" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390x" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ia64" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc64" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.s390", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390x" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.i386" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ia64" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ppc" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.s390x" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64" }, "product_reference": "ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "relates_to_product_reference": "5Server" } ] }, "vulnerabilities": [ { "cve": "CVE-2010-4167", "discovery_date": "2010-10-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "652860" } ], "notes": [ { "category": "description", "text": "Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.", "title": "Vulnerability description" }, { "category": "summary", "text": "ImageMagick: configuration files read from $CWD may allow arbitrary code execution", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Workstation:ImageMagick-0:6.2.8.0-12.el5.src", "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-0:6.2.8.0-12.el5.src", "5Client:ImageMagick-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-0:6.2.8.0-12.el5.src", "5Server:ImageMagick-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-4167" }, { "category": "external", "summary": "RHBZ#652860", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=652860" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4167", "url": "https://www.cve.org/CVERecord?id=CVE-2010-4167" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4167", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4167" } ], "release_date": "2010-10-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2012-02-21T02:21:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "5Client-Workstation:ImageMagick-0:6.2.8.0-12.el5.src", "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-0:6.2.8.0-12.el5.src", "5Client:ImageMagick-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-0:6.2.8.0-12.el5.src", "5Server:ImageMagick-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2012:0301" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Workstation:ImageMagick-0:6.2.8.0-12.el5.src", "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.i386", "5Client-Workstation:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-0:6.2.8.0-12.el5.src", "5Client:ImageMagick-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.i386", "5Client:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-0:6.2.8.0-12.el5.src", "5Server:ImageMagick-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-c++-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-c++-devel-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-debuginfo-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.ppc64", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-devel-0:6.2.8.0-12.el5.x86_64", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.i386", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ia64", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.ppc", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.s390x", "5Server:ImageMagick-perl-0:6.2.8.0-12.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "ImageMagick: configuration files read from $CWD may allow arbitrary code execution" } ] }