DLL Hijacking

dynamik

Here's a demo of DLL hijack attacks using SET/Metasploit: The Social-Engineer Toolkit - Metasploit DLL Hijack Zero Day on Vimeo

Here's the full story and (in)action from Microsoft: Microsoft won't patch critical DLL loading bugs

Is anyone else following this?
*

undomiel

No surprise there that Microsoft won't patch it outright as it could affect backwards compatibility. Hopefully they at least patch the applications that ship with Windows.