Almost 300 Windows 10 executables vulnerable to DLL hijacking

[ZorKas]

Hi,

Almost 300 Windows 10 executables vulnerable to DLL hijacking

[liosant]

it is not exact one vunerable, but DLLs system shared…
Comodo internet security protected against hijacking :-TU

[DecimaTech]

Comodo internet security protected against hijacking

CIS no longer protects against dll hijacking as the ability for HIPS to control dll loading was removed a long time ago.

@egemen post:13

You mean loading a DLL into memory? CIS is not supposed to or even designed to detect if you load a DLL into the process space of an application normally(without hooking or memory injection) except for rundll32.exe(Even this is going to change in the future versions).

By setting image execution control to aggressive and adding *.dll to execution list, you can receive alerts for DLLs but this is not really recommended/intended to be used and we will discontinue this ability in the future versions.

However, if you have a way to execute a standalone executable and bypass the image execution control, that means a flaw and let me know.

Egemen

[liosant]

apparently…
try exploited that “vulnerability” CIS protect although not to seem