Corel vulnerabilities, page 3
50 vulnerabilities
Known vulnerabilities in Corel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 28 products.
CVE-2000-0195corellinux
EPSS score1.54%
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.CVE-2000-0194corellinuxEPSS score1.54%
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.CVE-2000-0193corellinuxEPSS score1.34%
The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.CVE-2010-5240corelcoreldraw_x5+1EPSS score2.80%
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file. NOTE: some of these details are obtained from third party information.CVE-2017-2803corelcoreldraw_photo_paint_x8+1EPSS score1.13%
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version.CVE-2017-2804corelcoreldraw_photo_paint_x8+1EPSS score1.18%
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability.CVE-1999-1173corelwordperfectEPSS score1.52%
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack.CVE-2009-2564adobeacrobat_reader+2EPSS score5.60%
NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\bin\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which allows local users to gain SYSTEM privileges by replacing getPlus_HelperSvc.exe with a Trojan horse program, as demonstrated by use of getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the program is deleted and the associated service is not automatically launched after a successful installation and reboot.CVE-2009-4251corelpaint_shop_proEPSS score8.22%
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366.CVE-2019-6114corelpaintshop_pro_2019EPSS score2.64%
An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code.