(0Day) Corel CorelDRAW Graphics Suite GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

🗓️ 25 Oct 2022 00:00:00Reported by Michael DePlante (@izobashi) of Trend Micro's Zero Day InitiativeType

zdi🔗 www.zerodayinitiative.com👁 41 Views

(CorelDRAW Graphics Suite GIF Out-Of-Bounds Read Vulnerability allows remote attackers to disclose sensitive information. User interaction required to exploit. Vulnerability exists in parsing of GIF images. Lack of proper validation of user-supplied data results in read past allocated object. Can be leveraged to execute arbitrary code.

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) lies in the ability to read data beyond the buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.	15 Nov 202200:00	–	bdu_fstec
CNNVD	Corel CorelDRAW Graphics Suite 缓冲区错误漏洞	29 Mar 202300:00	–	cnnvd
CNVD	Corel CorelDRAW Graphics Suite buffer overflow vulnerability (CNVD-2023-29421)	31 Mar 202300:00	–	cnvd
CVE	CVE-2022-43610	29 Mar 202300:00	–	cve
Cvelist	CVE-2022-43610	29 Mar 202300:00	–	cvelist
EUVD	EUVD-2022-46606	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43610	29 Mar 202319:15	–	nvd
OSV	CVE-2022-43610	29 Mar 202319:15	–	osv
Prion	Design/Logic Flaw	29 Mar 202319:15	–	prion
Positive Technologies	PT-2022-5474 · Corel · Coreldraw Graphics Suite	26 Jan 202200:00	–	ptsecurity