Vulnerabilities > CVE-2014-8397 - Unspecified vulnerability in Corel Fastflick and Videostudio PRO
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/129922/CORE-2015-0001.txt |
| id | PACKETSTORM:129922 |
| last seen | 2016-12-05 |
| published | 2015-01-13 |
| reporter | Core Security Technologies |
| source | https://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html |
| title | Corel Software DLL Hijacking |
References
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/bid/72009
- http://www.securityfocus.com/bid/72009