Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Paintshop_pro_x5 | Corel | * | 15.2.0.2 (including) |
| Paintshop_pro_x6 | Corel | * | 16.0.0.113 (including) |
References
- http://osvdb.org/98163
- http://secunia.com/advisories/53618
- http://www.securityfocus.com/bid/62836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87763
- http://osvdb.org/98163
- http://secunia.com/advisories/53618
- http://www.securityfocus.com/bid/62836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87763