Microsoft Keeps Programs Prone to DLL Hijack a Secret

Microsoft remained silent from naming which of its Windows program, are prone to widespread “DLL Load Hijacking.” Because the programs don’t call code libraries using the full path name, DLL Load hijacking exist in many Windows applications. The culprit can exploit by tricking the application to load a malicious file required by the DLL, resulting for a malware to be planted on the machine. According to Jerry Bryant, group manager of Microsft Security response Center, the company plans to address the affected products through security or defense-in-depth updates. The company also published an automated tool that can help users to block such attacks.

Read the rest of the article »