Important for users - Corel Hijack Hole found - Beware.

Not sure if anyone has already mentioned this...

So it appears that several Zero Day vulnerabilities have been found in Corel's products, including DRAW x7, PaintShop Pro x7, CAD 2014, and VideoStudio PRO. 

I'd recommend reading that article from The Register, and be aware! Thought everyone should know!

Rohan

Parents
  • It's not been mentioned here, as far as I'm aware -- but it might have been more useful if you had included a link to the story, which I presume is the one at

    From what I read there, the problem requires a second file (a bogus .dll) to be in the same folder as the Corel file when it is opened.

    Accordingly, a user should be able to protect themselves against the problem, if they either inspect the folder for other material before opening the Corel file, or get in the habit of moving the file to another folder before using it.

    But it would help if somebody who fully understands the problem could look at it to see if there is any other circumstance where the problem might arise.

Reply Children