PT-2012-1450 · Corel · Corel Photo-Paint+1

Gjoko Krstic · Published 2012-09-07 · Updated 2012-09-07 · CVE-2010-5240

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CorelDRAW X5 version 15.1.0.588 Corel PHOTO-PAINT version 15.1.0.588

Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll or CrlRib.dll file in the current working directory. This can be demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file.

Recommendations For CorelDRAW X5 version 15.1.0.588, consider removing or restricting access to the dwmapi.dll and CrlRib.dll files in the current working directory to minimize the risk of exploitation. For Corel PHOTO-PAINT version 15.1.0.588, avoid using the software in directories that contain untrusted files, such as .cdr, .cpt, .cmx, or .csl files, until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2010-5240

Affected Products

Corel Photo-Paint

Coreldraw X5

References · 6

• 🔥 https://exploit-db.com/exploits/14787 · Exploit
• 🔥 https://exploit-db.com/exploits/14786 · Exploit
• http://secunia.com/advisories/41148 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-5240 · Security Note
• http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4954.php · Note
• http://zeroscience.mk/en/vulnerabilities/ZSL-2010-4953.php · Note