Corel Paint Shop Pro Photo X2 'FPX' File Heap Buffer Overflow Vulnerability
BID:37980
Info
Corel Paint Shop Pro Photo X2 'FPX' File Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 37980 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 27 2010 12:00AM |
| Updated: | Jan 27 2010 12:00AM |
| Credit: | Francisco Falcon from Core Security Technologies |
| Vulnerable: |
Corel Paint Shop Pro Photo X2 Ultimate 12.50 |
| Not Vulnerable: | |
Discussion
Corel Paint Shop Pro Photo X2 'FPX' File Heap Buffer Overflow Vulnerability
Corel Paint Shop Pro Photo X2 is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
Successful exploits may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.
Paint Shop Pro Photo X2 Ultimate 12.50 is vulnerable; other versions may also be affected.
Corel Paint Shop Pro Photo X2 is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
Successful exploits may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.
Paint Shop Pro Photo X2 Ultimate 12.50 is vulnerable; other versions may also be affected.
Exploit / POC
Corel Paint Shop Pro Photo X2 'FPX' File Heap Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Corel Paint Shop Pro Photo X2 'FPX' File Heap Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Corel Paint Shop Pro Photo X2 'FPX' File Heap Buffer Overflow Vulnerability
References:
References:
- Corel Paint Shop Pro Photo X2 FPX Heap Overflow (Core Security Technologies)
- Paint Shop Pro Photo X2 Homepage (Corel)
- [CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow (CORE Security Technologies Advisories