Tracker »

Issue 1459 – DLL hijacking protection

Component: General

Version: Unspecified

Severity: Enhancement

Priority: Medium

Votes: 0

Status: RESOLVED

Resolution: IMPLEMENTED

Implemented in: 5.21.2

Last modified: 2023-09-27 09:22

2016-09-12 14:45

PuTTY Commit 9398d230
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-indirect-dll-hijack.html

2016-09-12 14:45

https://winscp.net/forum/viewtopic.php?t=23717

2016-09-12 14:45

Implemented.

2016-09-12 14:46

https://www.exploitalert.com/view-details.html?id=24734

2017-07-10 21:45

This related PuTTY change is not relevant for WinSCP:
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-indirect-dll-hijack-2.html

2017-07-10 21:46

Further improved in WinSCP 5.10.3:
https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-indirect-dll-hijack-3.html

2022-08-06 18:11

Actually implemented only in WinSCP 5.21.2:
Commit 96b856da

2023-09-27 09:22

Follow-up Issue 2223.