CVE-2014-8395

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed...

CVE-2014-8394

Corel CAD 2014 is affected by CVE-2014-8394 due to DLL hijacking from untrusted search paths. When a Corel CAD 2014-related file is opened, the application looks for a DLL in its directory and can execute arbitrary code if a malicious DLL named FxManagedCommands_3.08_9.tx or TD_Mgd_3.08_9.dll is ...

CVE-2014-8398

Multiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 igfxcmrt32.dll, 2 ipl.dll, 3 MSPStyleLib.dll, 4 uFioUtil.dll, 5 uhDSPlay.dll, 6 uipl.dll, 7 uvipl.dll, 8 VC1DecDll.dll, or 9...

CVE-2014-8397

Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed...

CVE-2014-8398

CVE-2014-8398 is a DLL Hijacking vulnerability in Corel FastFlick. The issue arises from an unsafe DLL search path where, when opening a Corel-related file, the program searches the document’s directory for certain DLLs and can load a malicious one (one of: igfxcmrt32.dll, ipl.dll, MSPStyleLib.dl...

CVE-2014-8395

CVE-2014-8395 is a Corel DLL Hijacking vulnerability affecting Corel Painter 2015 (and related Corel products listed in the CORE-2015-0001 advisory). The issue arises from untrusted search path handling: when a user opens a file associated with Corel apps, the application searches the document’s ...

CVE-2014-8397

CVE-2014-8397 is part of Corel Software DLL Hijacking, affecting Corel VideoStudio PRO X7 and Corel FastFlick (and related Corel packages listed in Core Security advisory CORE-2015-0001). The issue is an Untrusted Search Path vulnerability where the application loads a malicious DLL from the same...

CVE-2014-8396

Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll file that is located in the same folder as the file being processed...

CVE-2014-8394

Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 FxManagedCommands3.089.tx or 2 TDMgd3.089.dll file in the current working directory...

CAD, CorelDRAW, Photo-Paint, etc. the software is exposed 0day vulnerabilities-vulnerability warning-the black bar safety net

LinkedIn（Core Security Security researcher disclosed Corel CAD, CorelDRAW, Photo-Paint, including the number of software contain DLL hijacking vulnerabilities, the vulnerability could allow remote code execution, there is no for this vulnerability is a valid patch. Vendor no response, a...

Corel Software DLL Hijacking Vulnerability Allows Hackers to Execute Malicious Code

Security researchers have disclosed local zero day DLL hijacking vulnerabilities in several applications developed by Corel Software that could allow an attacker to execute arbitrary commands on victims' computer, potentially affecting more than 100 million users. The security holes were publicly...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 Release Date: ============= 2015-01-06 Vulnerability Laboratory ID VL-ID: ====================================...

ZTE Datacard PCW(Telecom MF180) - Multiple Software Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

0-Days Exposed in Several Corel Applications

UPDATE–Researchers from Core Security have disclosed DLL hijacking vulnerabilities in several applications made by Corel Software after the vendor didn’t respond to Core’s notifications about the flaws. There are no patches available for the bugs, which can allow remote code execution. Corel sell...

ZTE Datacard MF180 Privilege Escalation / DLL Hijacking

/ Exploit Title:ZTE Datacard MF180 PCWTNZNZLMF180V1.0.0B02 Telecom MF180 Modem Insecure Permissions Local Privilege Escalation & PoC Local crash & Path Subversion Arbitrary DLL Injection Code Execution mmsdllr.dll Date: 10/01/2015 Author: Hadji Samir [email protected] Link...

Corel Software DLL Hijacking

1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL:https://www.coresecurity.com/core-labs/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Date of last update: 2015-01-06 Vendors contacted: Corel Release mode: User release 2...

ZTE Datacard PCW(Telecom MF180) - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...

ZTE Datacard PCW(Telecom MF180) - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard PCWTelecom MF180 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1405 Release Date: ============= 2015-01-12 Vulnerability Laboratory ID VL-ID: ====================================...