Vulnerabilities > CVE-2014-8394 - DLL Loading Arbitrary Code Execution vulnerability in Corel Corelcad 2014
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) FxManagedCommands_3.08_9.tx or (2) TD_Mgd_3.08_9.dll file in the current working directory. <a href="http://cwe.mitre.org/data/definitions/426.html">CWE-426: Untrusted Search Path</a>
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/129922/CORE-2015-0001.txt |
| id | PACKETSTORM:129922 |
| last seen | 2016-12-05 |
| published | 2015-01-13 |
| reporter | Core Security Technologies |
| source | https://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html |
| title | Corel Software DLL Hijacking |