CVE-2011-0403

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-01-11 · updated 2026-06-16

Description

Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.

Affected products

Imgburn: 1.0.0.0, 1.1.0.0, 1.2.0.0, 1.3.0.0, 2.0.0.0, 2.1.0.0 (+14)

References

http://osvdb.org/70273
http://packetstormsecurity.org/files/view/97207/imgburn-dllhijack.txt
http://secunia.com/advisories/42798
http://www.securityfocus.com/bid/45657
https://exchange.xforce.ibmcloud.com/vulnerabilities/64478
http://osvdb.org/70273
http://packetstormsecurity.org/files/view/97207/imgburn-dllhijack.txt
http://secunia.com/advisories/42798
http://www.securityfocus.com/bid/45657
https://exchange.xforce.ibmcloud.com/vulnerabilities/64478

Get alerted when CVE-2011-0403 or the next vulnerability affects your stack