Bug 1459 – DLL hijacking protection

Component: General

Version: Unspecified

OS: Unspecified

Severity: Enhancement

Priority: Medium

Implemented/Fixed in: 5.10

Resolution: FIXED

Status: RESOLVED

Votes: 0 Vote for this bug

Description
2016-09-12 14:45

https://git.tartarus.org/?p=simon/putty.git;a=commit;h=9398d230339d5bfaa94093af89a17abf33b5dfad

Comment #1
2016-09-12 14:45

https://winscp.net/forum/viewtopic.php?t=23717

Comment #2
2016-09-12 14:45

Implemented.

Comment #3
2016-09-12 14:46

https://www.exploitalert.com/view-details.html?id=24734

Comment #4
2017-07-10 21:45

https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-indirect-dll-hijack.html
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-indirect-dll-hijack-2.html
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-indirect-dll-hijack-3.html

Comment #5
2017-07-10 21:46

Further improved in 5.10.3 and 5.9.7.