CVE-2011-0403
ImgBurn - Untrusted Search Path and DLL Hijacking via Trojan Horse dwmapi.dll
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-0403. PoCs published by d3c0der.
AI-analyzed exploit summary This exploit leverages a DLL hijacking vulnerability in ImgBurn 2.4.0.0 by placing a malicious DLL in a network share location. When the application loads the DLL, it executes arbitrary code (e.g., launching calc.exe).
Description
Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.
Exploits (1)
This exploit leverages a DLL hijacking vulnerability in ImgBurn 2.4.0.0 by placing a malicious DLL in a network share location. When the application loads the DLL, it executes arbitrary code (e.g., launching calc.exe).