{ "schema_version": "1.4.0", "id": "GHSA-fq75-hmm6-xg54", "modified": "2022-05-17T02:02:24Z", "published": "2022-05-17T02:02:24Z", "aliases": [ "CVE-2011-0403" ], "details": "Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a CUE file.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0403" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64478" }, { "type": "WEB", "url": "http://osvdb.org/70273" }, { "type": "WEB", "url": "http://packetstormsecurity.org/files/view/97207/imgburn-dllhijack.txt" }, { "type": "WEB", "url": "http://secunia.com/advisories/42798" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/45657" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2011-01-11T03:00:00Z" } }