ArtRage Oil Painter Free - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application ArtRage Oil Painter Free published at the 'play' market has multiple vulnerabilities...

Infinite Painter - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Infinite Painter published at the 'play' market has multiple vulnerabilities...

Cmd Painter - Base64 encoded String, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Cmd Painter published at the 'play' market has multiple vulnerabilities...

Spray Painter HD - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spray Painter HD published at the 'play' market has multiple vulnerabilities...

CVE-2014-8395

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed...

CVE-2014-8395

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed...

Design/Logic Flaw

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed...

CVE-2014-8395

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed...

CVE-2014-8395

CVE-2014-8395 is a Corel DLL Hijacking vulnerability affecting Corel Painter 2015 (and related Corel products listed in the CORE-2015-0001 advisory). The issue arises from untrusted search path handling: when a user opens a file associated with Corel apps, the application searches the document’s ...

Corel Painter 'wacommt.dll' DLL Loading Arbitrary Code Execution Vulnerability

Corel Painter is a computerized art drawing software. An arbitrary code execution vulnerability exists in Corel Painter 'wacommt.dll' DLL loading due to the program failing to properly load the 'wacommt.dll' file. This allows an attacker to build a malicious DLL file to execute arbitrary code in...

Corel Software DLL Hijacking Vulnerability Allows Hackers to Execute Malicious Code

Security researchers have disclosed local zero day DLL hijacking vulnerabilities in several applications developed by Corel Software that could allow an attacker to execute arbitrary commands on victims' computer, potentially affecting more than 100 million users. The security holes were publicly...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

Corel Software DLL Hijacking

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Corel Software DLL Hijacking 1. Advisory Information Title: Corel Software DLL Hijacking Advisory ID: CORE-2015-0001 Advisory URL: http://www.coresecurity.com/advisories/corel-software-dll-hijacking Date published: 2015-01-12 Dat...

0-Days Exposed in Several Corel Applications

UPDATE–Researchers from Core Security have disclosed DLL hijacking vulnerabilities in several applications made by Corel Software after the vendor didn’t respond to Core’s notifications about the flaws. There are no patches available for the bugs, which can allow remote code execution. Corel sell...

Mozilla: Use-after-free when displaying table with many columns and column groups (MFSA 2013-05)

Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.1...