Corel PDF Fusion CVE-2013-0742 Arbitrary Code Execution Vulnerability

Bugtraq ID:	61160
Class:	Input Validation Error
CVE:	CVE-2013-0742
Remote:	Yes
Local:	No
Published:	Jul 08 2013 12:00AM
Updated:	Jul 08 2013 12:00AM
Credit:	Kaveh Ghaemmaghami via Secunia
Vulnerable:	Corel PDF Fusion 1.11
Not Vulnerable:

Corel PDF Fusion CVE-2013-0742 Arbitrary Code Execution Vulnerability

Corel PDF Fusion is prone to an arbitrary code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application.

Corel PDF Fusion 1.11 is vulnerable; other versions may also be affected.

Note: This issue was previously discussed in BID 61010 (Corel PDF Fusion Insecure Library Loading Code Execution and Stack Buffer Overflow Vulnerabilities), but has been moved to its own record for better documentation.

Corel PDF Fusion CVE-2013-0742 Arbitrary Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Corel PDF Fusion CVE-2013-0742 Arbitrary Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Corel PDF Fusion CVE-2013-0742 Arbitrary Code Execution Vulnerability

References:

• PDF Fusion Homepage (Corel)