CorelCAD Multiple DLL Hijacking Exploit

CorelCAD 2014 is prone to a vulnerability that may allow the loading and execution of any library file named FxManagedCommands_3.08_9.tx or TD_Mgd_3.08_9.dll, if this dll is located in the same folder where a .DWT file is. The attacker must entice a victim into opening a specially crafted .DWT file. This file and the associated binary may be delivered to a user through remote WebDAV shares. An attacker may exploit this issue to execute arbitrary code.