Marsu has discovered a vulnerability in Corel Paint Shop Pro Photo, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within a third party library file (igcore15d.dll) when handling CLP files and can be exploited to cause a stack-based buffer overflow via a specially crafted CLP file.

For more information:
SA25050

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 11.20. Other versions may also be affected.

Solution
Do not open untrusted CLP files.

Provided and/or discovered by
Marsu

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.milw0rm.com/exploits/3779

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers