CVE-2017-2804

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerabilit...

CVE-2016-8730

An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GI...

Memory corruption

An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GI...

CVE-2017-2804

CVE-2017-2804 is a remote out-of-bounds write in Corel PHOTO‑PAINT X8 (18.1.0.661) TIFF parsing via the IETIF.FLT filter. The TIff IFD/Tag handling can lead to a negative/incorrect size being used in a memcpy, causing memory corruption. Public writeups describe the vulnerability as a memory corru...

CVE-2016-8730

Summary: CVE-2016-8730 is a memory corruption/out-of-bounds write vulnerability in Corel PHOTO-PAINT X8 18.1.0.661 caused by the GIF parsing code (IEGIF.flt). A crafted GIF can trigger code execution. Affected product/component: Corel PHOTO-PAINT X8 (18.1.0.661) GIF parsing. Root cause: out-of-bo...

CVE-2017-2803

CVE-2017-2803 affects Corel PHOTO-PAINT X8, specifically the TIFF parsing component (IETIF.FLT, 64‑bit DLL) in CorelDRAW Graphics Suite X8. The vulnerability arises in the TIFF IFD parsing path where an underflow in size calculation can lead to a large value passed to memset, causing memory corru...

PT-2018-5052 · Corel · Core Photo-Paint X8

Name of the Vulnerable Software and Affected Versions: Core PHOTO-PAINT X8 version 18.1.0.661 Description: A memory corruption vulnerability exists in the GIF parsing functionality. This issue can be triggered by a specially crafted GIF file, potentially resulting in code execution. An attacker c...

nipponpaint.com.my XSS vulnerability

Open Bug Bounty ID: OBB-580742 Description| Value ---|--- Affected Website:| nipponpaint.com.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 27 Update: gd-2.2.5-1.fc27

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

nipponpaint.com.hk XSS vulnerability

Open Bug Bounty ID: OBB-317629 Description| Value ---|--- Affected Website:| nipponpaint.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Corel PHOTO-PAINT X8 64-bit TIFF Filter Code Execution Vulnerability(CVE-2017-2803)

Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger...

Corel PHOTO-PAINT X8 GIF Filter Code Execution Vulnerability(CVE-2016-8730)

Summary An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a...

Corel PHOTO-PAINT X8 TIFF Filter Code Execution Vulnerability(CVE-2017-2804)

Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this...

Corel PHOTO-PAINT X8 GIF Parsing Function Code Execution Vulnerability

Corel PHOTO-PAINT X8 is the Canadian Corel Corel company's set of color and photo editing software. A remote code execution vulnerability exists in the GIF parsing feature in Corel PHOTO-PAINT X8 version 18.1.0.661. A remote attacker could exploit this vulnerability to execute arbitrary code or...

Corel PHOTO-PAINT X8 TIFF Parsing Code Execution Vulnerability

Corel PHOTO-PAINT X8 is the Canadian Corel Corel company's set of color and photo editing software. A remote code execution vulnerability exists in the TIFF parsing feature in Corel PHOTO-PAINT X8 version 18.1.0.661. A remote attacker could exploit this vulnerability to execute arbitrary code or...

Corel PHOTO-PAINT X8 TIFF Parsing Code Execution Vulnerability

Corel PHOTO-PAINT X8 is the Canadian Corel Corel company's set of color and photo editing software. A remote code execution vulnerability exists in the TIFF parsing feature in Corel PHOTO-PAINT X8 version 18.1.0.661. A remote attacker could exploit this vulnerability to execute arbitrary code or...

CVE-2014-8393

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...

CVE-2014-8393

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...

Spoofing

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...

CVE-2014-8393

CVE-2014-8393 corresponds to a DLL hijacking vulnerability in Corel products (CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015 and Corel PDF Fusion, plus related apps). The flaw arises when a file is opened and the application searches the document’s directory for DL...