Description
Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll file that is located in the same folder as the file being processed.
References
- 72007 vdb-entry
- 20150112 Corel Software DLL Hijacking mailing-list
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- 20150112 Corel Software DLL Hijacking mailing-list