imagemagick: insecure temporary file [LWN.net]

Package(s):

imagemagick

CVE #(s):

CAN-2003-0455

Created:

June 30, 2003

Updated:

July 10, 2003

Description:

There are circumstances in which imagemagick's libmagick library creates temporary files without taking appropriate security precautions. This vulnerability could be exploited by a local user to create or overwrite files with the privileges of another user who is invoking a program using this library.

Alerts:

OpenPKG	OpenPKG-SA-2003.034	2003-07-10
Debian	DSA-331-1	2003-06-27

(Log in to post comments)