Vulnerabilities > CVE-2014-8395 - Unspecified vulnerability in Corel Painter 2015
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/129922/CORE-2015-0001.txt |
| id | PACKETSTORM:129922 |
| last seen | 2016-12-05 |
| published | 2015-01-13 |
| reporter | Core Security Technologies |
| source | https://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html |
| title | Corel Software DLL Hijacking |
References
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/bid/72006
- http://www.securityfocus.com/bid/72006