CVE-2013-0733

Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct…

published June 5, 2014

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

⚠️ An unsuspecting .jpg can be your gateway to chaos! A Trojan horse dwmapi.dll in the same folder as images can allow nefarious local users to execute arbitrary code in Corel PaintShop Pro X5 and X6. 😱 Think of it like a delivery person who casually opens your door with a spare key they found lying around — untrusted sources can easily slip in unnoticed, leading to a full-blown invasion of your system! This vulnerability lets local users with access to the same folder as your precious images run any code they want. Imagine them painting a picture of devastation by hijacking functions that could compromise your entire system! 🚨

Put simply

Think of it like a delivery person who casually opens your door with a spare key they found lying around — untrusted sources can easily slip in unnoticed, leading to a full-blown invasion of your system! In Corel PaintShop Pro X5 and X6, the untrusted search path vulnerability permits execution of malicious code via a Trojan horse dwmapi.dll file found alongside .jpg files — a classic case of DLL hijacking gone rogue!

What to do

This vulnerability lets local users with access to the same folder as your precious images run any code they want. Imagine them painting a picture of devastation by hijacking functions that could compromise your entire system! 🚨 To protect yourself, ensure that your software is updated to the latest versions beyond 16.0.0.113 and 15.2.0.2. Additionally, maintain a watchful eye on your file directories to avoid placing untrusted files in folders where applications might execute them. 🛡️ You've got this! With a little vigilance and these steps, you can keep your digital art safe and sound! 😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05108 · 92.3th percentile
Published
2014-06-05T20:00Z
EPSS history
Timeline
  • 05 JUN 20:00Z
    Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct…
    cvelistv5