VULNERABILITY INTELLIGENCE
CVE-2013-0733
CVSS score9.3 HIGH
EPSS probability5.11%
CISA KEVNot currently listed
Published2014-06-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file.
Primary references
- PSIRT-CNA@flexerasoftware.com — Broken Link
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory, VDB Entry
- PSIRT-CNA@flexerasoftware.com — VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — VDB Entry