Corel Painter 'wacommt.dll' DLL Loading Arbitrary Code Execution Vulnerability

Bugtraq ID:	72006
Class:	Design Error
CVE:	CVE-2014-8395
Remote:	Yes
Local:	No
Published:	Jan 12 2015 12:00AM
Updated:	Jul 15 2015 12:14AM
Credit:	Marcos Accossatto from Core Security.
Vulnerable:
Not Vulnerable:

Corel Painter 'wacommt.dll' DLL Loading Arbitrary Code Execution Vulnerability

Corel Painter is prone to a vulnerability that lets attackers execute arbitrary code.

Successful exploits will allow the attackers to execute arbitrary code in the context of the user running the affected application.

Corel Painter 'wacommt.dll' DLL Loading Arbitrary Code Execution Vulnerability

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.



A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Corel Painter 'wacommt.dll' DLL Loading Arbitrary Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Corel Painter 'wacommt.dll' DLL Loading Arbitrary Code Execution Vulnerability

References:

• Corel Homepage (Corel )
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• Microsoft Security Advisory (2269637) (Microsoft)