Approved changes feed: RSS · Atom

cpe:2.3:a:corel:coreldraw_photo_paint_x8:18.1.0.661:*:*:*:*:*:*:*

part: a version: 18.1.0.661 update: *

VendorCorel (64fffbe5-3edf-5917-8ab7-f4866db5f4cb)
ProductCoreldraw Photo Paint X8 (cd4b481e-200e-5b0d-a872-cb7de6219bb8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2804 vulnerable 2026-06-03 14:37:09.053003 Details available
HIGH (8.8)
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T17:48:25.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2803 vulnerable 2026-06-03 14:37:09.052564 Details available
HIGH (8.8)
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-17T02:16:09.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8730 vulnerable 2026-06-03 14:36:09.818195 Details available
HIGH (8.8)
An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GIF file to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T16:39:07.358Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.