CVE-2014-8398: Medium severity corel fastflick vulnerability

Published Jan 15, 2015

Updated

Multiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) igfxcmrt32.dll, (2) ipl.dll, (3) MSPStyleLib.dll, (4) uFioUtil.dll, (5) uhDSPlay.dll, (6) uipl.dll, (7) uvipl.dll, (8) VC1DecDll.dll, or (9) VC1DecDllSSE3.dll file that is located in the same folder as the file being processed.

Affected Software

1 affected component

Corel FastFlick

Event History

Jan 15, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8398?

CVE-2014-8398 is considered to have a medium severity due to the potential for local users to execute arbitrary code.

How do I fix CVE-2014-8398?

To fix CVE-2014-8398, update to the latest version of Corel FastFlick that addresses these vulnerabilities.

Who is affected by CVE-2014-8398?

Local users running vulnerable versions of Corel FastFlick are at risk from CVE-2014-8398.

What types of attacks are possible with CVE-2014-8398?

CVE-2014-8398 may allow attackers to conduct DLL hijacking attacks via the exploitation of untrusted search path vulnerabilities.

Can CVE-2014-8398 lead to further system compromise?

Yes, successful exploitation of CVE-2014-8398 could lead to arbitrary code execution, potentially compromising the affected system.