EUVD-2012-4653

Malware in sbrugna...

Vulnerability Spotlight: Multiple Vulnerabilities in CorelDRAW X8

Today, Talos is disclosing several vulnerabilities that have been identified in CorelDRAW X8. CorelDRAW X8 is graphics suite used for manipulating raster and vector images and is a common alternative to Adobe Creative Cloud. Several of the vulnerabilities being disclosed today specifically affect...

Paintshop Pro X7 - '.gif' Conversion Heap Memory Corruption 'LZWMinimumCodeSize' (Denial of Service)

Application: Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Paintshop Prox X7, Other versions may also be affected. Secunia: PRL: 2015-06 Author: Francis Provencher Protek Research...

CAD, CorelDRAW, Photo-Paint, etc. the software is exposed 0day vulnerabilities-vulnerability warning-the black bar safety net

LinkedIn（Core Security Security researcher disclosed Corel CAD, CorelDRAW, Photo-Paint, including the number of software contain DLL hijacking vulnerabilities, the vulnerability could allow remote code execution, there is no for this vulnerability is a valid patch. Vendor no response, a...

Corel Software DLL Hijacking Vulnerability Allows Hackers to Execute Malicious Code

Security researchers have disclosed local zero day DLL hijacking vulnerabilities in several applications developed by Corel Software that could allow an attacker to execute arbitrary commands on victims' computer, potentially affecting more than 100 million users. The security holes were publicly...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

0-Days Exposed in Several Corel Applications

UPDATE–Researchers from Core Security have disclosed DLL hijacking vulnerabilities in several applications made by Corel Software after the vendor didn’t respond to Core’s notifications about the flaws. There are no patches available for the bugs, which can allow remote code execution. Corel sell...

Corel PaintShop Pro Insecure Library Loading (CVE-2013-0733)

A code execution vulnerability exists in Corel's PaintShop Pro...