Unscored CVE-2014-8394 EUVD-2014-8231GHSA-m2v5-5h76-p8cv

Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking atta…

Published Jan 15, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) FxManagedCommands_3.08_9.tx or (2) TD_Mgd_3.08_9.dll file in the current working directory.

References

20150112 Corel Software DLL Hijacking mailing-list
72004 vdb-entry
http://www.coresecurity.com/advisories/corel-software-dll-hijacking
20150112 Corel Software DLL Hijacking mailing-list