Yup. And since applications load DLLs from their working directory by default, and opening a document sets the working directory... you'd better make sure you never open a document from an untrusted folder.
Yup. And since applications load DLLs from their working directory by default, and opening a document sets the working directory... you'd better make sure you never open a document from an untrusted folder.
Applications don't load from the working directory first by default.
But they do load from the working directory by default [0] and until XP SP2 they put it before system32 in the search order [1] by default.
[0] https://learn.microsoft.com/en-us/windows/win32/dlls/dynamic...
[1] https://learn.microsoft.com/en-us/windows/win32/dlls/dynamic...
The first link shows it loads from the folder of the application before the working directory even when the safe default is disabled.