CVE-2010-5240

CVE-2010-5240 describes multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5, allowing local privilege escalation. Attackers can exploit this by placing a malicious dwmapi.dll or CrlRib.dll file in a directory containing specific Corel file types. With a CVSS score of 6.9, this vulnerability has high impact on confidentiality, integrity, and availability, but requires local access and medium attack complexity. While not on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.