CVE-2014-8397 Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is....
MediumCVSS 4.6
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| corel fastflick | All versions | No fix listed |
| corel videostudio pro | = x7 | No fix listed |
References
- 20150112 Corel Software DLL Hijacking mailing-list
- www.coresecurity.com
- 20150112 Corel Software DLL Hijacking mailing-list
- 72009 vdb-entry