Vulnerabilities > CVE-2014-8394 - Unspecified vulnerability in Corel Corelcad 2014
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) FxManagedCommands_3.08_9.tx or (2) TD_Mgd_3.08_9.dll file in the current working directory.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/129922/CORE-2015-0001.txt |
| id | PACKETSTORM:129922 |
| last seen | 2016-12-05 |
| published | 2015-01-13 |
| reporter | Core Security Technologies |
| source | https://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html |
| title | Corel Software DLL Hijacking |
References
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/bid/72004
- http://www.securityfocus.com/bid/72004