CVE-2013-0733 Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse...
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| corel paintshop pro x5 | <= 15.2.0.2 | No fix listed |
| corel paintshop pro x6 | <= 16.0.0.113 | No fix listed |
References
- 98163 broken-link vdb-entry
- 53618 third-party-advisory
- 62836 third-party-advisory vdb-entry
- corel-paintshop-cve20130733-code-exec(87763) vdb-entry