CVE-2021-38108

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issu...

CVE-2021-38108

The CVE-2021-38108 issue affects Corel WordPerfect 2020 (version 20.0.0.200) via Word97Import200.dll. It is an Out-of-bounds Read vulnerability triggered while parsing a crafted DOC file, allowing an attacker to access unauthorized system memory in the context of the current user. Exploitation re...

CVE-2021-38110

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2021-38110

The CVE-2021-38110 entry relates to Corel WordPerfect 2020 (version 20.0.0.200). It describes an Out-of-bounds Write in Word97Import200.dll during parsing of a crafted DOC file, enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (victim opens a malicio...

Vulnerabilities found in Corel products

FortiGuard Labs has found vulnerabilities in the following Corel products: Corel CorelDraw Standard Corel PDF Fusion Corel PhotoPaint Corel Presentations Corel WordPerfect A malicious party can exploit these vulnerabilities to execute arbitrary code under application privileges or to gain access ...

Corel WordPerfect 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability exists in IPPPP82.FLT in Corel Presentations 2020 20.0.0.200, which can be exploited by an unauthenticated attacker to gain unauthorized acces...

Corel WordPerfect 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability in Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 can be exploited by an unauthenticated attacker to execute arbitrary code...

Corel WordPerfect 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability in IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 can be exploited by an unauthenticated attacker to execute arbitrary code...

Corel WordPerfect 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability exists in Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200, which can be exploited by an unauthenticated attacker to gain unauthorized...

CVE-2021-29367

A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file...

CVE-2012-4900

Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference...

Null pointer dereference

Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference...

CVE-2012-4900

CVE-2012-4900 affects Corel WordPerfect Office X6 Standard Edition (WordPerfect X6), version 16.0.0.388. The connected advisory details a vulnerability in WPD parsing caused by an untrusted pointer dereference, specifically within WPWIN16.DLL STARTAPP when STRNICMP is invoked in MSVCR80. This lea...

CVE-2012-4900

Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference...

The vulnerability of the WPG reading module in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.

The vulnerability of the WPG reading module in cross-platform libraries for working with GraphicsMagick is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability

Corel WordPerfect Office X9 is an office software. Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability, which arises because Presentations X9 suffers from a dll hijacking vulnerability when processing files such as wpg. An attacker can exploit the vulnerability to lo...

Corel WordPerfect Office Presentations has a dll hijacking vulnerability ( CNVD-2019-36844)

Corel WordPerfect Office X9 is an office software. Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability, Presentations X9 suffers from a dll hijacking vulnerability when working with documents such as docs. An attacker can exploit the vulnerability to load a malicious...

UBUNTU-CVE-2017-17682

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted wpg image file that triggers a ReadWPGImage call...

[SECURITY] Fedora 25 Update: libwpd-0.10.2-1.fc25

libwpd is a library for import of WordPerfect documents...

[SECURITY] Fedora 27 Update: libwpd-0.10.2-1.fc27

libwpd is a library for import of WordPerfect documents...