CVE-2013-3248: Critical severity corel pdf fusion vulnerability
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3248?
CVE-2013-3248 is classified as a local privilege escalation vulnerability.
How do I fix CVE-2013-3248?
To fix CVE-2013-3248, ensure that the wintab32.dll file is not placed in the current working directory and update to a secure version of Corel PDF Fusion.
Who is affected by CVE-2013-3248?
Local users on systems running Corel PDF Fusion version 1.11 are affected by CVE-2013-3248.
What causes CVE-2013-3248 vulnerability?
CVE-2013-3248 is caused by an untrusted search path that allows execution of a malicious wintab32.dll file.
Is there a workaround for CVE-2013-3248?
As a workaround for CVE-2013-3248, avoid placing untrusted files in the same directory as Corel PDF Fusion executables.