Lucene search

K
cveMitreCVE-2014-8395
HistoryJan 15, 2015 - 3:59 p.m.

CVE-2014-8395

2015-01-1515:59:10
mitre
web.nvd.nist.gov
25
cve-2014-8395
corel painter 2015
untrusted search path vulnerability
dll hijacking
trojan horse
wacommt.dll
nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.973

Percentile

99.9%

Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll file that is located in the same folder as the file being processed.

Affected configurations

Nvd
Node
corelpainterMatch2015
VendorProductVersionCPE
corelpainter2015cpe:2.3:a:corel:painter:2015:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.973

Percentile

99.9%