Unscored severity · published Jun 5, 2014
CVE-2013-0733
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking…
–
CVSS
5.1%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.1% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Paintshop Pro X5 · Corel
through 15.2.0.2 · source: NVD
PP
Paintshop Pro X6 · Corel
through 16.0.0.113 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0733
Broken Link
http://osvdb.org/98163
Third Party Advisory
http://secunia.com/advisories/53618
Third Party Advisory
http://www.securityfocus.com/bid/62836
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87763