CVE-2014-8397

CVE-2014-8397 is part of Corel Software DLL Hijacking, affecting Corel VideoStudio PRO X7 and Corel FastFlick (and related Corel packages listed in Core Security advisory CORE-2015-0001). The issue is an Untrusted Search Path vulnerability where the application loads a malicious DLL from the same...

CVE-2014-8398

CVE-2014-8398 is a DLL Hijacking vulnerability in Corel FastFlick. The issue arises from an unsafe DLL search path where, when opening a Corel-related file, the program searches the document’s directory for certain DLLs and can load a malicious one (one of: igfxcmrt32.dll, ipl.dll, MSPStyleLib.dl...