CVE-2021-38099

CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-38099

CVE-2021-38099 affects Corel PhotoPaint Standard 2020 (CDRRip.dll, version 22.0.0.474). The issue is an Out-of-bounds Write when parsing a crafted CPT file, enabling arbitrary code execution in the current user’s context. Exploitation requires user interaction (victim opens a malicious CPT file)....

Vulnerabilities found in Corel products

FortiGuard Labs has found vulnerabilities in the following Corel products: Corel CorelDraw Standard Corel PDF Fusion Corel PhotoPaint Corel Presentations Corel WordPerfect A malicious party can exploit these vulnerabilities to execute arbitrary code under application privileges or to gain access ...

Corel PhotoPaint Standard 2020 缓冲区错误漏洞

Corel PhotoPaint Standard 2020 is a commercial photo editing and pixel-based design program for Corel from Corel Digital Technology Corel Canada. A buffer error vulnerability in CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 can be exploited by an unauthenticated attacker to execute...

Corel PhotoPaint Standard 2020 缓冲区错误漏洞

Corel PhotoPaint Standard 2020 is a commercial photo editing and pixel-based design program for Corel from Corel Digital Technology Corel Canada. A buffer error vulnerability in CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 can be exploited by an unauthenticated attacker to execute...

Corel PhotoPaint Standard 2020 缓冲区错误漏洞

Corel PhotoPaint Standard 2020 is a commercial photo editing and pixel-based design program from Corel by Corel Digital Technology Corel Canada. Corel PhotoPaint Standard 2020 22.0.0.474 suffers from a buffer error vulnerability that can be exploited by an unauthenticated attacker to execute...