Lucene search

K
cve[email protected]CVE-2014-8395
HistoryJan 15, 2015 - 3:59 p.m.

CVE-2014-8395

2015-01-1515:59:00
NVD-CWE-Other
web.nvd.nist.gov
20
cve-2014-8395
corel painter 2015
untrusted search path vulnerability
dll hijacking
trojan horse
wacommt.dll
nvd

7.7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed.

CPENameOperatorVersion
corel:paintercorel paintereq2015

7.7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%