KLA10666 Code execution vulnerability in Corel WordPerfect

An unspecified vulnerability was found in Corel WordPerfect. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Microsoft Word document.

Original advisories

ZDI advisory

Related products

Corel-WordPerfect

CVE list

CVE-2015-6948 high

Solution

Try to update as soon as vendor releases patch. While product stands unpatched avoid interacting with untrusted documents.

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Corel WordPerfect