Vulnerabilities found in Corel products

🗓️ 01 Oct 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Corel vulnerabilities allow code execution via rogue files; updates unavailable.

Reporter	Title	Published	Views	Family All 135
BDU FSTEC	The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Corel PDF Fusion software for converting PDF files lies in the fact that it allows for writing beyond the buffer boundaries, enabling an attacker to execute arbitrary code.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Corel PhotoPaint software lies in the ability to write beyond the buffer boundaries, allowing attackers to execute arbitrary code.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Corel WordPerfect text document creation and editing software’s Word97Import200.dll library allows a hacker to execute arbitrary code.	30 May 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the CrlPlatform.dll library in the CorelDRAW Standard graphic editor, which allows a hacker to gain unauthorized access to protected information.	6 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The availability of the IPPP72.FLT module of the Corel Presentations preparation and presentation software, which is related to reading data beyond the buffer in memory, allows unauthorized access by intruders to protected memory information.	6 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the IBJPG2.FLT library in the Corel Presentations preparation and presentation software allows a hacker to execute arbitrary code.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Coreip.dll file of the Corel PDF Fusion PDF conversion software allows a hacker to execute arbitrary code.	22 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CrlPlatform.dll library of the CorelDRAW Standard graphic editor lies in the reading of data beyond the buffer boundaries in memory. This allows an attacker to gain unauthorized access to protected information.	22 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CDRRip.dll library in the Corel PhotoPaint Standard graphic design and photo editing software arises from writing beyond the buffer boundaries in memory. This allows an attacker to execute arbitrary code.	2 Aug 202200:00	–	bdu_fstec

01 Oct 2021 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8

CVSS 29.3

EPSS0.01535

Corel vulnerabilities Arbitrary code execution Rogue files Updates unavailable CorelDraw Standard PDF Fusion PhotoPaint Presentations WordPerfect Rogue files