Description
Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse u32ZLib.dll file that is located in the same folder as the file being processed.
References
- 20150112 Corel Software DLL Hijacking mailing-list
- http://www.coresecurity.com/advisories/corel-software-dll-hijacking
- 20150112 Corel Software DLL Hijacking mailing-list
- 72009 vdb-entry