NVD

Id
35462  
Name
CVE-2014-8396  
Description
Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll file that is located in the same folder as the file being processed.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-15  
Modified Date
2015-01-16  
Seq
2014-8396  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181740 35462 CVE-2014-8396 20150112 Corel Software DLL Hijacking  View
181741 35462 CVE-2014-8396 http://www.coresecurity.com/advisories/corel-software-dll-hijacking  View
181742 35462 CVE-2014-8396 20150112 Corel Software DLL Hijacking  View
181743 35462 CVE-2014-8396 72007  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18813 JVNDB-2014-007688 Corel PDF Fusion における任意のコードを実行される脆弱性 Corel PDF Fusion には、検索パスに関する処理に不備があるため、DLL ハイジャック攻撃を実行され、任意のコードを実行される脆弱性が存在します。 CVE-2014-8396 75689 CVE-2014-8396 35462 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007688.html 2014-10-22 2015-01-19 View