Vulnerability Details CVE-2013-0733
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.079
EPSS Ranking 91.6%
CVSS Severity
CVSS v2 Score 9.3
References
- http://osvdb.org/98163
- http://secunia.com/advisories/53618
- http://www.securityfocus.com/bid/62836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87763
- http://osvdb.org/98163
- http://secunia.com/advisories/53618
- http://www.securityfocus.com/bid/62836
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87763
Products affected by CVE-2013-0733
-
cpe:2.3:a:corel:paintshop_pro_x5:15.2.0.2
-
cpe:2.3:a:corel:paintshop_pro_x6:15.2.0.2
-
cpe:2.3:a:corel:paintshop_pro_x6:16.0.0.113