CVE-2022-46662: corel corporation roxio creator ljb Unquoted Search Path or Element
Vulnerability summary
CVE-2022-46662 is a medium (CVSS 6.7) Unquoted Search Path or Element vulnerability in corel corporation roxio creator ljb. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 38.1% of scored vulnerabilities.
Timeline
- 21-12-2022PublishedVulnerability first disclosed.
- 16-04-2025Last modifiedVulnerability information updated.
Description
Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service. The affected product and versions are as follows: Roxio Creator LJB version number 12.2 build number 106B62B, version number 12.2 build number 106B63A, version number 12.2 build number 106B69A, version number 12.2 build number 106B71A, and version number 12.2 build number 106B74A)
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
+0.02 pp
From 0.43% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Corel1 product
- roxio_creator_ljb12.2:build_106b62b | 12.2:build_106b63a | 12.2:build_106b69a | 12.2:build_106b71a | 12.2:build_106b74a
Corel corporation1 product
- roxio creator ljbversion number 12.2 build number 106B62B, version number 12.2 build number 106B63A, version number 12.2 build number 106B69A, version number 12.2 build number 106B71A, and version number 12.2 build number 106B74A
2 vendors · 2 products
References
2 links- kb.corel.com/jp/129393Third Party Advisory
- jvn.jp/en/jp/JVN13075438/index.htmlThird Party Advisory