CVE-2012-4728: Null Pointer Dereference
The (1) QProGetNotebookWindowHandle and (2) Ordinal132 functions in QPW160.dll in Corel Quattro Pro X6 Standard Edition 16.0.0.388 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted QPW file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4728?
CVE-2012-4728 is classified as a denial of service vulnerability, which can cause the application to crash.
How do I fix CVE-2012-4728?
To mitigate CVE-2012-4728, users should update Corel Quattro Pro X6 to a version later than 16.0.0.388.
What software is affected by CVE-2012-4728?
CVE-2012-4728 affects Corel Quattro Pro X6 Standard Edition version 16.0.0.388 and earlier.
How can attackers exploit CVE-2012-4728?
Attackers can exploit CVE-2012-4728 by sending crafted QPW files that trigger a NULL pointer dereference.
What impact does CVE-2012-4728 have on users?
The impact of CVE-2012-4728 on users is the potential for application crashes, leading to denial of service.