Security in Context: The BeyondTrust Blog

Welcome to the Zeroday Tracker: Your Vulnerability Watchlist

Get critical updates on the latest zeroday threats, including impact, mitigation and protection information - only from BeyondTrust.

Corel WordPerfect Memory Corruption

Disclosed March 7, 2013    Zeroday : 944 days

Vulnerability Description:

Corel WordPerfect contains a vulnerability when handling specially crafted documents, which an attacker can leverage to cause a heap-based buffer overflow. Successful exploitation may result in arbitrary code execution.



Vulnerable Software/Devices:

WordPerfect X6 version, and possibly other versions

Vulnerability Severity:


Exploit Availability:

No Exploit Available

Exploit Impact:

Remote Code Execution
Remote Code Execution Exploitation of this vulnerability is possible by sending maliciously crafted documents, via phishing emails, to vulnerable users. Remote attackers who successfully exploit this vulnerability will be able to execute code on the vulnerable system with the same rights as the currently logged on user.

BeyondTrust Prevention and Detection:

BeyondTrust's Retina® Network Security Scanner scans devices to detect for this vulnerability.

  • 18407 - Corel WordPerfect Memory Corruption (Zero Day)
  • 18408 - Corel WordPerfect Memory Corruption (Zero Day) - x64
  • Mitigation:

    Do not open untrusted documents, or documents that come from trusted sources unexpectedly.


  • Original Advisory (High-Tech Bridge)
  • CVE(s):

  • CVE-2012-4900