Comments Off

Fix for DLL Attacks – CWDIllegalInDllSearch registry entry is available to control the DLL search path algorithm

Microsoft on 31st August has published an automated tool to enable the Windows users to easily block attacks exploiting vulnerabilities in a host of Windows applications.
The patch that was released earlier seems to be a confusing to its users, which made Microsoft to deliver it using Fixit.

The DLL load hijacking vulnerabilities exist in many Windows applications because the programs don’t call code libraries — dubbed “dynamic-link library,” or “DLL” — using the full pathname, but instead use only the filename. Criminals can exploit that by tricking the application into loading a malicious file with the same name as the required DLL. The result: Hackers can hijack the PC and plant malware on the machine.

This fix will:

- Remove the current working directory from the library search path.
- Prevent an application from loading a library fr

Filed in: Did you know, FAQs, Fix, New Feature Tags: , ,

Related Posts

Bookmark and Promote!

© 2012 . All rights reserved. XHTML / CSS Valid.
Managed by 7ndomains.