Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5 when MAGICKCORE_INSTALLED_SUPPORT is defined allows local users to gain privileges via a Trojan horse configuration file in the current working directory.