Corel FastFlix Multiple DLL Hijacking Exploit

Corel FastFlix is prone to a vulnerability that may allow the loading and execution of any library file named igfxcmrt32.dll or ipl.dll or MSPStyleLib.dll or uFioUtil.dll or uhDSPlay.dll or uipl.dll or uvipl.dll or VC1DecDll.dll or VC1DecDll_SSE3.dll, if this dll is located in the same folder where a .VFP file is. The attacker must entice a victim into opening a specially crafted .VFP file. This file and the associated binary may be delivered to a user through remote WebDAV shares. An attacker may exploit this issue to execute arbitrary code.