Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Paintshop_pro_x5 | Corel | * | 15.2.0.2 (including) |
| Paintshop_pro_x6 | Corel | * | 16.0.0.113 (including) |