Triaging a DLL planting vulnerability

DLL planting (aka binary planting/hijacking/preloading) resurface every now and then, it is not always clear on how Microsoft will respond to the report. This blog post will try to clarify the parameters considered while triaging DLL planting issues.
It is well known that when an application loads a DLL without specifying a fully qualified path, Windows attempts to locate the DLL by searching a well-defined set of directories in an order known as DLL search order.

Print Share Comment Cite Upload Translate

APA

() » Triaging a DLL planting vulnerability. Retrieved from https://www.truth.cx/2018/04/04/triaging-a-dll-planting-vulnerability/.

MLA

" » Triaging a DLL planting vulnerability." - , https://www.truth.cx/2018/04/04/triaging-a-dll-planting-vulnerability/

HARVARD

» Triaging a DLL planting vulnerability., viewed ,

VANCOUVER

- » Triaging a DLL planting vulnerability. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2018/04/04/triaging-a-dll-planting-vulnerability/

CHICAGO

" » Triaging a DLL planting vulnerability." - Accessed . https://www.truth.cx/2018/04/04/triaging-a-dll-planting-vulnerability/

IEEE

" » Triaging a DLL planting vulnerability." [Online]. Available: https://www.truth.cx/2018/04/04/triaging-a-dll-planting-vulnerability/. [Accessed: ]

Select a language: Afrikaans Albanian Arabic Armenian Basque Bengali Bulgarian Catalan Cambodian Chinese (Mandarin) Croatian Czech Danish Dutch English Estonian Fiji Finnish French Georgian German Greek Gujarati Hebrew Hindi Hungarian Icelandic Indonesian Irish Italian Japanese Javanese Korean Latin Latvian Lithuanian Macedonian Malay Malayalam Maltese Maori Marathi Mongolian Nepali Norwegian Persian Polish Portuguese Punjabi Quechua Romanian Russian Samoan Serbian Slovak Slovenian Spanish Swahili Swedish Tamil Tatar Telugu Thai Tibetan Tonga Turkish Ukrainian Urdu Uzbek Vietnamese Welsh Xhosa DLL planting (aka binary planting/hijacking/preloading) resurface every now and then, it is not always clear on how Microsoft will respond to the report. This blog post will try to clarify the parameters considered while triaging DLL planting issues. It is well known that when an application loads a DLL without specifying a fully qualified path, Windows attempts to locate the DLL by searching a well-defined set of directories in an order known as DLL search order. First name:

Last name: