CVE-2014-8396

Corel PDF Fusion is affected by a DLL hijacking vulnerability (untrusted search path) where the attacker can place a malicious quserex.dll in the same folder as the processed file, enabling local code execution. The CVE is CVE-2014-8396. The connected sources confirm the vulnerability scope and D...

CVE-2014-8396

Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll file that is located in the same folder as the file being processed...

Corel PDF Fusion 'quserex.dll' DLL Load Arbitrary Code Execution Vulnerability

Corel PDF Fusion is a PDF editing and authoring tool. An arbitrary code execution vulnerability exists in Corel PDF Fusion 'quserex.dll' DLL loading due to the program failing to properly load the 'quserex.dll' file. This allows an attacker to construct a malicious DLL file to load arbitrary code...

Corel Software DLL Hijacking Vulnerability Allows Hackers to Execute Malicious Code

Security researchers have disclosed local zero day DLL hijacking vulnerabilities in several applications developed by Corel Software that could allow an attacker to execute arbitrary commands on victims' computer, potentially affecting more than 100 million users. The security holes were publicly...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

0-Days Exposed in Several Corel Applications

UPDATE–Researchers from Core Security have disclosed DLL hijacking vulnerabilities in several applications made by Corel Software after the vendor didn’t respond to Core’s notifications about the flaws. There are no patches available for the bugs, which can allow remote code execution. Corel sell...

Corel PDF Fusion 1.11 缓冲区溢出漏洞

No description provided by source...

Corel PDF Fusion Stack Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' cla...

Corel PDF Fusion XPS Stack Buffer Overflow (CVE-2013-3248)

A code execution vulnerability exists in Corel PDF Fusion...

Corel PDF Fusion 1.11 Multiple Vulnerabilities - Windows

Corel PDF Fusion is prone to multiple vulnerabilities. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

Corel PDF Fusion Detection (Windows SMB Login)

SMB login-based detection of Corel PDF Fusion. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2013-3248

Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file...

CVE-2013-0742

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long ZIP directory entry name in an XPS file...

Design/Logic Flaw

Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file...

Stack overflow

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long ZIP directory entry name in an XPS file...

CVE-2013-0742

Corel PDF Fusion 1.11 is affected by a stack-based buffer overflow via a long ZIP directory entry name in an XPS file, allowing remote code execution or a denial-of-service (application crash). This vulnerability is identified as CVE-2013-0742 and has multiple connected advisories (e.g., Red Hat,...

CVE-2013-0742

Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a long ZIP directory entry name in an XPS file...

CVE-2013-3248

CVE-2013-3248 summary (confirmed by connected sources): Corel PDF Fusion 1.11 contains an untrusted search path vulnerability that allows local users to gain privileges via a Trojan horse wintab32.dll in the current working directory, demonstrated with a directory containing a .pdf or .xps file. ...

CVE-2013-3248

Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file...