VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 11, 2011· Updated Apr 29, 2026

CVE-2011-0403

CVE-2011-0403

Description

Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.

Affected products

20
  • Imgburn/Imgburn20 versions
    cpe:2.3:a:imgburn:imgburn:1.0.0.0:*:*:*:*:*:*:*+ 19 more
    • cpe:2.3:a:imgburn:imgburn:1.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:1.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:1.2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:1.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.3.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.3.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.4.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imgburn:imgburn:2.5.4.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.