Description
Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party sources.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Corel Paint Shop Pro Photo 11.20 - '.clp' Local Buffer Overflow EDB-3779 · local · Apr 23, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2007-1506 vdb-entry
- 3779 exploit
- 25050 third-party-advisory
- 25016 third-party-advisory
- 1017963 vdb-entry
- 23604 vdb-entry
- 35308 vdb-entry
- 35386 vdb-entry
- paintshopphoto-clp-bo(33821) vdb-entry