Microsoft on 31st August has published an automated tool to enable the Windows users to easily block attacks exploiting vulnerabilities in a host of Windows applications.
The patch that was released earlier seems to be a confusing to its users, which made Microsoft to deliver it using Fixit.
The DLL load hijacking vulnerabilities exist in many Windows applications because the programs don’t call code libraries — dubbed “dynamic-link library,” or “DLL” — using the full pathname, but instead use only the filename. Criminals can exploit that by tricking the application into loading a malicious file with the same name as the required DLL. The result: Hackers can hijack the PC and plant malware on the machine.
This fix will:
- Remove the current working directory from the library search path.
- Prevent an application from loading a library fr