Jump to content

Recommended Posts

Posted

Where does IMGburn get it's version info for the ElbyCDIO.dll file? This is because Elby has issued a new driver version to fix a security flaw where a malicous program could gain admin rights under certain conditions. The current version is 6130 but IMGburn still lists the now out-of-date 6119 as version in the log output

Posted

From a field within the file's version info table I believe.

 

I don't have pc access right now, so maybe you could check properties / details on the dll itself and see if any of them mention that version number?

Posted

Ok so it appears the 6.1.3.0 update only updates the one in windows\system32\drivers and not the one in windows\syswow64... which is what ImgBurn uses on a 64 bit machine because it's only a 32 bit app and Windows redirects the system32 folder there.

Posted

Just a quick update on this. What a difference 3 little letters can make. Apparantly the exploit was in ElbyCDIO.sys (kernel part of the driver); IMGBurn reports the version of ElbyCDIO.dll the user mode part of ElbyCDIO where there is no exploit. There's no need to update that one

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.