CVE-2022-23748
Description
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Summary dbcve.org
The mDNSResponder.exe component contains a DLL sideloading vulnerability where the executable does not properly validate the path or conditions under which it loads DLL files. This allows an attacker to place a malicious DLL in a location where mDNSResponder.exe will load it, executing arbitrary code in the context of the legitimate process.
Mitigation
Recompile mDNSResponder.exe with secure DLL loading practices, such as using absolute paths for DLL imports, enabling safe DLL search mode, or implementing explicit loading via LoadLibrary with full paths to prevent untrusted DLL injection.