CVE-2014-8393: DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion

High severity · published Aug 29, 2017

CVE-2014-8393

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion

7.8

CVSS

8.3%

EPSS

On KEV

Description

DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)8.3% · higher than 95% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Coreldraw · Corel

x7 · source: NVD

Coreldraw Photo Paint · Corel

x7 · source: NVD

Paint Shop Pro · Corel

x7 · source: NVD

Painter · Corel

2015 · source: NVD

Pdf Fusion · Corel

All versions, or not specified · source: NVD

Affected product

Coreldraw

Corel

All Coreldraw CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-8393

CVE.org

https://www.cve.org/CVERecord?id=CVE-2014-8393

Third Party Advisory

http://packetstormsecurity.com/files/129922/Corel-Software-DLL-Hijacking.html

Mailing List

http://seclists.org/fulldisclosure/2015/Jan/33

Permissions Required

http://secunia.com/advisories/62210

Third Party Advisory

http://www.coresecurity.com/advisories/corel-software-dll-hijacking

www.securityfocus.com

http://www.securityfocus.com/archive/1/534452/100/0/threaded

Third Party Advisory

http://www.securityfocus.com/bid/72005