Browse CVEs

HIGH 7.8 CVE-2016-9043 An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661). A… Coreldraw No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2014-8393EPSS 8% DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion. Coreldraw No fix yet Fix from $1,9502017-08-29 MEDIUM 6.8 CVE-2015-6948 Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code v… Wordperfect Mitigation only Fix from $1,6002015-09-15 HIGH 9.3 CVE-2013-0733EPSS 5% Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code a… Paintshop Pro X5 after 16.0.0.113 Fix from $1,9502014-06-05 HIGH 9.3 CVE-2013-0742EPSS 9% Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application cras… Pdf Fusion No fix yet Fix from $1,9502013-10-03 HIGH 9.3 CVE-2013-3248EPSS 18% Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the curren… Pdf Fusion Mitigation only Fix from $1,9502013-10-03 MEDIUM 6.9 CVE-2010-5240 Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan hor… Coreldraw X5 Mitigation only Fix from $1,6002012-09-07 HIGH 9.3 CVE-2009-4251EPSS 8% Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code vi… Paint Shop Pro No fix yet Fix from $1,9502009-12-10 HIGH 9.3 CVE-2007-2921EPSS 8% Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute a… Activecgm Browser Patch available Fix from $1,9502007-06-14 HIGH 7.4 CVE-2007-2366EPSS 34% Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file. Paint Shop Pro No fix yet Fix from $1,9502007-04-30 HIGH 9.3 CVE-2007-1735EPSS 9% Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long pr… Wordperfect No fix yet Fix from $1,9502007-03-28 HIGH 7.2 CVE-2000-0193 The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. Linux Patch available Fix from $1,9502000-03-02 HIGH 7.2 CVE-2000-0194 buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. Linux Mitigation only Fix from $1,9502000-02-24 HIGH 7.2 CVE-2000-0195 setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. Linux Mitigation only Fix from $1,9502000-02-24 HIGH 7.2 CVE-2000-0048 get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. Linux Mitigation only Fix from $1,9502000-01-12