CVE-2010-5240
CorelDRAW X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file. NOTE: some of these details are obtained from third party information.
Múltiples vulnerabilidades de path de búsqueda no confiable en Corel PHOTO-PAINT y CorelDRAW X5 v15.1.0.588, permite a usuario locales obtener privilegios a través de un fichero (1) dwmapi.dll o (2) CrlRib.dll troyanizados en el directorio de trabajo actual, como se demostró mediante un directorio que contenía un fichero .cdr, .cpt, .cmx, or .csl. NOTA: Algunos de estos detalles se han obtenido de terceros.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2010-08-25 First Exploit
- 2012-09-07 CVE Reserved
- 2012-09-07 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4953.php | X_refsource_misc | |
| http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4954.php | X_refsource_misc |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/14786 | 2010-08-25 | |
| https://www.exploit-db.com/exploits/14787 | 2010-08-25 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/41148 | 2012-09-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Corel Search vendor "Corel" | Coreldraw X5 Search vendor "Corel" for product "Coreldraw X5" | 15.1.0.588 Search vendor "Corel" for product "Coreldraw X5" and version "15.1.0.588" | - |
Affected
| ||||||
| Corel Search vendor "Corel" | Photo-paint X3 Search vendor "Corel" for product "Photo-paint X3" | 13.0.0.576 Search vendor "Corel" for product "Photo-paint X3" and version "13.0.0.576" | - |
Affected
| ||||||