[Secunia Advisory SA42798]

Secunia Advisory SA42798: ImgBurn Insecure Library Loading Vulnerability

 

A vulnerability has been discovered in ImgBurn, which can be exploited by malicious people to compromise a user's system.

 

The vulnerability is caused due to the application loading libraries (e.g. dwmapi.dll) in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into e.g. opening a CUE file located on a remote WebDAV or SMB share.

 

Successful exploitation allows execution of arbitrary code.

 

The vulnerability is confirmed in version 2.5.4.0. Other versions may also be affected.

 

https://secunia.com/advisories/42798