CVE:CVE-2010-5240
CNNVD:CNNVD-201209-105
Corel PHOTO-PAINT和CorelDRAW X5 15.1.0.588中存在多个不可信搜索路径漏洞。本地攻击者可利用该漏洞通过当前目录（如包含.cdr、.cpt、.cmx或.csl文件的目录）下的Trojan木马(1)dwmapi.dll或(2)CrlRib.dll文件，获取特权。
solution:Upgrade corel coreldraw_x5 to a higher version than 15.1.0.588,and avoid the version 15.1.0.588; Upgrade corel photo-paint_x3 to a higher version than 13.0.0.576,and avoid the version 13.0.0.576