Vulnerabilities > CVE-2014-8395 - DLL Loading Arbitrary Code Execution vulnerability in Corel Painter 2015
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed. <a href="http://cwe.mitre.org/data/definitions/426.html">CWE-426: Untrusted Search Path</a>
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Packetstorm
data source | https://packetstormsecurity.com/files/download/129922/CORE-2015-0001.txt |
id | PACKETSTORM:129922 |
last seen | 2016-12-05 |
published | 2015-01-13 |
reporter | Core Security Technologies |
source | https://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html |
title | Corel Software DLL Hijacking |