CVE-2010-5240 - CVE House
Back to Database
Status published Medium CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW...

Vulnerability Description

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-5240

Credits & Attribution

No credits recorded in the NVD database.

References

More from corel

View All →
CVE-2021-38110
Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an...
High 7.8
CVE-2021-38109
Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read...
Medium 5.5
CVE-2021-38108
Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an...
Medium 5.5
CVE-2021-38107
CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an...
Medium 5.5
CVE-2021-38106
UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an...
Medium 5.5

Affected Vendor

Affected Software

coreldraw x5, photo-paint x3
Vulnerable Versions:
15.1.0.588, 13.0.0.576

Timeline

Official Publish: September 7th, 2012
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.