Description
Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed.
References
- 20150112 Corel Software DLL Hijacking mailing-list
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- 20150112 Corel Software DLL Hijacking mailing-list
- 72006 vdb-entry