Ubuntu
imagemagick package

  1. Bug #27767
  2. Comment #4

Comment 4 for bug 27767

Revision history for this message
Debian Bug Importer (debzilla) wrote :

Message-ID: <email address hidden>
Date: Fri, 30 Dec 2005 14:19:27 +0100
From: Florian Weimer <email address hidden>
To: <email address hidden>
Cc: <email address hidden>
Subject: Re: Shell command injection in delegate code (via file names)

severity 345238 grave
thanks

With some user interaction, this is exploitable through Gnus and
Thunderbird. I think this warrants increasing the severity to
"grave".