CVE-2021-38105

Name of the Vulnerable Software and Affected Versions Corel Presentations version 20.0.0.200

Description The issue is related to an out-of-bounds read when parsing a crafted file, specifically affecting the IPPP82.FLT module in Corel Presentations. This could allow an unauthenticated attacker to access unauthorized system memory in the context of the current user by leveraging a malicious PPT file. Exploitation requires user interaction, where a victim must open the malicious file.

Recommendations For Corel Presentations version 20.0.0.200, consider avoiding the use of the IPPP82.FLT module until a patch is available, or refrain from opening untrusted PPT files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.