Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-3248.
PoCs published by Metasploit, Kaveh Ghaemmaghami, juan vazquez, including Metasploit module exploits/windows/fileformat/corelpdf_fusion_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Corel PDF Fusion 1.11 by crafting a malicious XPS file with an overly long entry name, leading to arbitrary code execution when opened by the victim.
Description
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in Corel PDF Fusion 1.11 by crafting a malicious XPS file with an overly long entry name, leading to arbitrary code execution when opened by the victim.
This Metasploit module exploits a stack-based buffer overflow in Corel PDF Fusion 1.11 by crafting a malicious XPS file with an overly long entry name, leading to arbitrary code execution when opened by the target user.