Re: CVE request: ImageMagick opens config files in $CWD

[Josh Bressers <bressers () redhat com>]

----- "Vincent Danen" <vdanen () redhat com> wrote:

> Noticed this in the Debian BTS.  It's been fixed in upstream svn, and
> would be a fairly low impact issue.  The Debian report has a proof of
> concept.
>
> Could we get a CVE assigned for this issue?  Thanks.
>
> References:
>
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601824
> https://bugzilla.redhat.com/show_bug.cgi?id=652860

Please use CVE-2010-4167.

Thanks.

-- 
    JB