Executive Summary

This vulnerability is a DLL search path hijacking issue in the UPDF.exe executable for Windows version 1.8.5.0. An attacker with local access can place a malicious dxtn.dll file in the 'C:\Users\<user>\AppData\Local\Microsoft\WindowsApps\' directory. When UPDF.exe runs, it may load this malicious DLL instead of the legitimate one, allowing the attacker to execute arbitrary code on the system.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to arbitrary code execution and persistence on the affected system. This means an attacker with local access could run malicious code with the privileges of the user running UPDF.exe, potentially compromising the system, stealing data, or maintaining long-term access.

Useful 0 Not Useful 0