Priority MEDIUM 58
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pd…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.18483 · Published 2013-10-03 · No fix listed
Priority MEDIUM 58
Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.33901 · Published 2007-04-30 · No fix listed
Priority MEDIUM 52
Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS file.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09007 · Published 2013-10-03 · No fix listed CWE-119
Priority MEDIUM 51
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08217 · Published 2009-12-10 · No fix listed CWE-119
Priority MEDIUM 51
Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07829 · Published 2007-06-14 · No fix listed
Priority MEDIUM 51
Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer selection (PRS) name in a Wordperfect document.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08715 · Published 2007-03-28 · No fix listed CWE-119
Priority MEDIUM 48
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05108 · Published 2014-06-05 · No fix listed
Priority MEDIUM 45
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.08342 · Published 2017-08-28 · No fix listed CWE-427
Priority MEDIUM 44
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.11588 · Published 2007-04-24 · No fix listed
Priority MEDIUM 43
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02638 · Published 2019-06-19 · No fix listed CWE-190
Priority MEDIUM 40
Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03039 · Published 2021-10-01 · No fix listed CWE-787
Priority MEDIUM 40
Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03373 · Published 2021-10-01 · No fix listed CWE-787
Priority MEDIUM 40
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01178 · Published 2018-04-24 · No fix listed CWE-787
Priority MEDIUM 40
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01126 · Published 2018-04-24 · No fix listed CWE-787
Priority MEDIUM 40
NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\bin\getPlus_HelperSvc.exe…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.05596 · Published 2009-07-21 · No fix listed CWE-264
Priority LOW 39
IBJPG2.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02339 · Published 2021-10-01 · No fix listed CWE-787
Priority LOW 39
CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02339 · Published 2021-10-01 · No fix listed CWE-787
Priority LOW 39
Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02401 · Published 2021-10-01 · No fix listed CWE-787
Priority LOW 39
An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661).
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02593 · Published 2018-04-24 · No fix listed CWE-787
Priority LOW 38
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00881 · Published 2023-03-29 · No fix listed CWE-787
Priority LOW 38
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00881 · Published 2023-03-29 · No fix listed CWE-787
Priority LOW 38
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00881 · Published 2023-03-29 · No fix listed CWE-125
Priority LOW 38
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00881 · Published 2023-03-29 · No fix listed CWE-787
Priority LOW 38
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00934 · Published 2023-03-29 · No fix listed CWE-121
Priority LOW 38
Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02143 · Published 2021-10-01 · No fix listed CWE-787
Load more