CVE-2011-0403

Published: Jan 11, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.

Affected (20)

Products: Imgburn: Imgburn

Imgburn

1 product

Imgburn

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Imgburn Imgburn	Version 1.0.0.0
Imgburn Imgburn	Version 1.1.0.0
Imgburn Imgburn	Version 1.2.0.0
Imgburn Imgburn	Version 1.3.0.0
Imgburn Imgburn	Version 2.0.0.0
Imgburn Imgburn	Version 2.1.0.0
Imgburn Imgburn	Version 2.2.0.0
Imgburn Imgburn	Version 2.3.0.0
Imgburn Imgburn	Version 2.3.1.0
Imgburn Imgburn	Version 2.3.2.0
Imgburn Imgburn	Version 2.4.0.0
Imgburn Imgburn	Version 2.4.1.0
Imgburn Imgburn	Version 2.4.2.0
Imgburn Imgburn	Version 2.4.3.0
Imgburn Imgburn	Version 2.4.4.0
Imgburn Imgburn	Version 2.5.0.0
Imgburn Imgburn	Version 2.5.1.0
Imgburn Imgburn	Version 2.5.2.0
Imgburn Imgburn	Version 2.5.3.0
Imgburn Imgburn	Version 2.5.4.0