Comments (4)
Most of them are related to delay-loading and dependecies and discovered by auto program.
from powertoys.
Can you please go into more details? /needinfo
from powertoys.
Sorry for the delay. We've got a pretty busy schedule these days.
We discovered PowerToys to load these DLLs directly from CWD which leads to DLL hijack that can enable attacker to load their malicious DLL at startup or use M$ signed exe to load their own malicious DLL. However, the PowerToys.exe is located at Program Files so it should be considered as a minor issue.
It was caught by our own proprietary security program during a regular check.
from powertoys.
By the way, some of them should be caused by unintended hard-coded LoadLibrary introduced by runtime linking to several API like Remote Desktop Services API (wtsapi32.dll). Just use LoadLibrary manually with proper path set and then everything should be fine.
from powertoys.
Related Issues (20)
- Treat well-known debugging environment variables as lists HOT 1
- Bug keyboard manager - Please help me
- Awake seems not working HOT 4
- [Workspaces] Saving and loading File Explorer with tabs HOT 1
- Revo uninstaller?
- Workspace tool doesn't save Discord HOT 2
- Hello, I use it too much and would like to add other features HOT 1
- Workspace tool doesn't save VsCode HOT 1
- Mouse smoothing
- The windows created by a Workspace won't work with FancyZones HOT 4
- Fancy zones broken on the applicaion used with Workspace feature! HOT 5
- Workspaces — couple of issues. HOT 2
- Awake icon doesn't come in side tray on taskbar HOT 5
- [Workspaces] Duplicates previously launched applications.
- [Workspaces] Doesn't remember workspaces from Ms Edge.
- PowerToys Run ran into an issue HOT 3
- Slow Launch Time and Workspace Resizing Issue HOT 2
- PowerToys WorkSpaces: add checkbox for "one app instance"
- Awake Not Able to Be Interacted With HOT 1
- Workspaces does not capture "LibreOffice Calc" Windows HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from powertoys.