Back to Database
Status published
Critical
CVE-2009-4251
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka...
Vulnerability Description
Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4251
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/37204
- http://osvdb.org/60592
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54551
- http://secunia.com/advisories/37591
- http://www.vupen.com/english/advisories/2009/3418
- http://aluigi.freeforums.org/post8780.html
- http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt
More from corel
View All →CVE-2021-38110
Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an...
High
7.8
CVE-2021-38109
Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read...
Medium
5.5
CVE-2021-38108
Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an...
Medium
5.5
CVE-2021-38107
CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an...
Medium
5.5
CVE-2021-38106
UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an...
Medium
5.5
Affected Vendor
corel
View all reports →Affected Software
paint shop pro
Vulnerable Versions:
8.10
Timeline
Official Publish:
December 10th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.