Fortinet Discovers Corel CorelDRAW Memory Corruption Vulnerability
Fortinet's FortiGuard Labs has discovered a Memory Corruption vulnerability in Corel CorelDRAW Standard 2020.
CorelDRAW Standard is a Commercial Photo-Editing Tool by Corel. It is the go-to graphic design suite for hobbyists and home businesses. Users can create postcards, photo books, advertisements and web graphics with illustration, layout, and photo editing.
SolutionsFortiGuard Labs released the following FortiGate IPS signature which covers this specific vulnerability:
Released May 19, 2021
No solution has been provided by the vendor.
Fortinet reported the vulnerability to Corel on March 4, 2021.
Fortinet requested (First Notice) for an update on March 9, 2021.
Fortinet requested (Second Notice) for an update on March 22, 2021.
Fortinet requested (Third & Final Notice) for an update on April 5, 2021.
Corel responded and acknowledged receipt of vulnerability on April 12, 2021.
Fortinet requested for an update on May 12, 2021.
Fortinet requested for an update on May 21, 2021.
Fortinet requested for an update on July 15, 2021.
Fortinet notified the vendor with intent to Publish 0-Day Vulnerability Advisory and/or Blog on September 21, 2021.
Fortinet releases advisory on September 29, 2021.