Vulnerabilities > CVE-2014-8398 - Unspecified vulnerability in Corel Fastflick
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Multiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) igfxcmrt32.dll, (2) ipl.dll, (3) MSPStyleLib.dll, (4) uFioUtil.dll, (5) uhDSPlay.dll, (6) uipl.dll, (7) uvipl.dll, (8) VC1DecDll.dll, or (9) VC1DecDll_SSE3.dll file that is located in the same folder as the file being processed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/129922/CORE-2015-0001.txt |
| id | PACKETSTORM:129922 |
| last seen | 2016-12-05 |
| published | 2015-01-13 |
| reporter | Core Security Technologies |
| source | https://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html |
| title | Corel Software DLL Hijacking |
References
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://seclists.org/fulldisclosure/2015/Jan/33
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/archive/1/534452/100/0/threaded
- http://www.securityfocus.com/bid/72010
- http://www.securityfocus.com/bid/72010