Ch3vr0n Posted May 15, 2017 Posted May 15, 2017 Where does IMGburn get it's version info for the ElbyCDIO.dll file? This is because Elby has issued a new driver version to fix a security flaw where a malicous program could gain admin rights under certain conditions. The current version is 6130 but IMGburn still lists the now out-of-date 6119 as version in the log output
LIGHTNING UK! Posted May 15, 2017 Posted May 15, 2017 From a field within the file's version info table I believe. I don't have pc access right now, so maybe you could check properties / details on the dll itself and see if any of them mention that version number?
LIGHTNING UK! Posted May 16, 2017 Posted May 16, 2017 Ok so it appears the 6.1.3.0 update only updates the one in windows\system32\drivers and not the one in windows\syswow64... which is what ImgBurn uses on a 64 bit machine because it's only a 32 bit app and Windows redirects the system32 folder there.
Ch3vr0n Posted May 16, 2017 Author Posted May 16, 2017 KK, I'll tell them Verstuurd vanaf mijn Nexus 6P met Tapatalk
Ch3vr0n Posted May 16, 2017 Author Posted May 16, 2017 Just a quick update on this. What a difference 3 little letters can make. Apparantly the exploit was in ElbyCDIO.sys (kernel part of the driver); IMGBurn reports the version of ElbyCDIO.dll the user mode part of ElbyCDIO where there is no exploit. There's no need to update that one
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now