CVE-2014-8393

HIGH

Coreldraw - Uncontrolled Search Path

Title source: rule

Description

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.

Exploits (2)

exploitdb WORKING POC VERIFIED

by LiquidWorm · clocalwindows

https://www.exploit-db.com/exploits/14786

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by LiquidWorm · clocalwindows

https://www.exploit-db.com/exploits/14787

View Code ZIP pw:eip

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/534452/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/72005

Permissions Required third-party-advisory x_refsource_secunia

http://secunia.com/advisories/62210

Third Party Advisory x_refsource_misc

http://www.coresecurity.com/advisories/corel-software-dll-hijacking

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031522

Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2015/Jan/33

Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html

Scores

CVSS v3 7.8

EPSS 0.0484

EPSS Percentile 89.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-427

Status published

Products (5)

corel/coreldraw x7

corel/coreldraw_photo_paint x7

corel/paint_shop_pro x7

corel/painter 2015

corel/pdf_fusion

Published Aug 29, 2017

Tracked Since Feb 18, 2026