CVE-2009-4251: Corel Paint Shop Pro

High severity, CVSS 9.3. EPSS: 8.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366.

Affected products

• Corel Paint Shop Pro: version 8.10 only

Published 2009-12-10. Last modified 2026-06-16.