CVE-2011-0403

CRITICAL 9.3CVE-2011-0403 · Published 11/01/2011 · updated 16/06/2026

In short

CVE-2011-0403 is a CRITICAL (CVSS 9.3) vulnerability affecting imgburn (imgburn).
Chance of exploitation in the next 30 days (EPSS): 7.1%, higher than 94.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
imgburn imgburn	`= 1.0.0.0= 1.1.0.0= 1.2.0.0= 1.3.0.0= 2.0.0.0= 2.1.0.0= 2.2.0.0= 2.3.0.0= 2.3.1.0= 2.3.2.0= 2.4.0.0= 2.4.1.0= 2.4.2.0= 2.4.3.0= 2.4.4.0= 2.5.0.0= 2.5.1.0= 2.5.2.0= 2.5.3.0= 2.5.4.0`	No fix yet

Description

Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.

References

osvdb.org/70273
packetstormsecurity.org/files/view/97207/imgburn-dllhijack.txt · Exploit
secunia.com/advisories/42798 · Vendor Advisory
securityfocus.com/bid/45657 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/64478

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free