CVE-2009-4251

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-12-10 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366.

Affected products

Corel Paint Shop Pro: 8.10

References

http://aluigi.freeforums.org/post8780.html
http://osvdb.org/60592
http://secunia.com/advisories/37591
http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt
http://www.securityfocus.com/bid/37204
http://www.vupen.com/english/advisories/2009/3418
https://exchange.xforce.ibmcloud.com/vulnerabilities/54551
http://aluigi.freeforums.org/post8780.html
http://osvdb.org/60592
http://secunia.com/advisories/37591
http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt
http://www.securityfocus.com/bid/37204

Get alerted when CVE-2009-4251 or the next vulnerability affects your stack