Multiple Corel Products 'wintab32.dll' DLL Loading Arbitrary Code Execution Vulnerability

Bugtraq ID:	72005
Class:	Design Error
CVE:	CVE-2014-8393
Remote:	Yes
Local:	No
Published:	Jan 12 2015 12:00AM
Updated:	Jul 15 2015 12:14AM
Credit:	Marcos Accossatto of Core Security Exploit Writers Team
Vulnerable:
Not Vulnerable:

Multiple Corel Products 'wintab32.dll' DLL Loading Arbitrary Code Execution Vulnerability

Multiple Corel products are prone to a vulnerability that lets attackers execute arbitrary code.

Successful exploits will allow the attackers to execute arbitrary code in the context of the user running the affected application.

Multiple Corel Products 'wintab32.dll' DLL Loading Arbitrary Code Execution Vulnerability

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.



A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Multiple Corel Products 'wintab32.dll' DLL Loading Arbitrary Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Corel Products 'wintab32.dll' DLL Loading Arbitrary Code Execution Vulnerability

References:

• Corel Homepage (Corel )
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• Microsoft Security Advisory (2269637) (Microsoft)