Vulnerability in Corel Paintshop Pro X5
CVE-2013-0733
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.
Affected products
- Corel Paintshop_pro_x5
- Corel Paintshop_pro_x6
- N/a — versions n/a
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry, Broken Link)
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- PSIRT-CNA@flexerasoftware.com (VDB Entry, vdb-entry, x_refsource_XF)