About this tag
Library loading refers to the process by which applications load external libraries, such as DLLs, during execution. Insecure library loading is a class of vulnerabilities that can allow remote code execution if an attacker places a malicious library in a location where an application will load it. Microsoft Security Advisory 2269637 documents this issue and provides guidance on mitigating the risk. The advisory has been updated over time to include related security bulletins, such as MS12-022 for Expression Design, MS11-059 for Data Access Components, MS11-023 and MS11-025 for Microsoft Office and MFC, MS11-015 for Windows Media, MS11-016 for Microsoft Groove, MS11-017 for Remote Desktop Client, MS11-003 for Internet Explorer, and MS11-001 for Windows Backup Manager. These updates reflect ongoing efforts to address insecure library loading across various Microsoft products.
  1. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V15.0 (March 13, 2012): Added the following Microsoft Security Bulletin to the Updates relating to Insecure Library Loading section: MS12-022, "Vulnerability in Expression Design Could Allow Remote Code Execution." Summary: Microsoft is aware that research has been...
  2. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V9.0 (August 9, 2011): Added Microsoft Security Bulletin MS11-059, "Vulnerability in Data Access Components Could Allow Remote Code Execution," to the Updates relating to Insecure Library Loading section. Summary: Microsoft is aware that research has been published...
  3. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V9.0 (August 9, 2011): Added Microsoft Security Bulletin MS11-059, "Vulnerability in Data Access Components Could Allow Remote Code Execution," to the Updates relating to Insecure Library Loading section. Advisory Summary:Microsoft is aware that research has been published...
  4. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution

    Revision Note: V7.0 (April 12, 2011): Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS11-023, "Vulnerabilities in Microsoft Office Could Allow Remote Code Execution;" and MS11-025, "Vulnerability in Microsoft Foundation Class (MFC)...
  5. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V7.0 (April 12, 2011): Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS11-023, "Vulnerabilities in Microsoft Office Could Allow Remote Code Execution;" and MS11-025, "Vulnerability in Microsoft Foundation Class (MFC)...
  6. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V6.0 (March 8, 2011): Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS11-015, "Vulnerabilities in Windows Media Could Allow Remote Code Execution;" MS11-016, "Vulnerability in Microsoft Groove Could Allow Remote Code...
  7. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V5.0 (February 8, 2011): Added Microsoft Security Bulletin MS11-003, "Cumulative Security Update for Internet Explorer," to the Updates relating to Insecure Library Loading section. Advisory Summary:Microsoft is aware that research has been published detailing a remote attack...
  8. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V4.0 (January 11, 2011): Added Microsoft Security Bulletin MS11-001, "Vulnerability in Windows Backup Manager Could Allow Remote Code Execution," to the Updates relating to Insecure Library Loading section. Advisory Summary:Microsoft is aware that research has been published...
  9. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V3.0 (December 14, 2010) Added the following Microsoft Security Bulletins to the Updates relating to Insecure Library Loading section: MS10-093, "Vulnerability in Windows Movie Maker Could Allow Remote Code Execution;" MS10-094, "Vulnerability in Windows Media Encoder Could Allow...
  10. News

    MS10-097 - Important: Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remo

    Severity Rating: Important - Revision Note: V1.0 (December 14, 2010): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in the Internet Connection Signup Wizard of Microsoft Windows. This security update is rated Important for all supported editions of...
  11. News

    MS10-097 - Important: Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remo

    Bulletin Severity Rating:Important - This security update resolves a publicly disclosed vulnerability in the Internet Connection Signup Wizard of Microsoft Windows. This security update is rated Important for all supported editions of Windows XP and Windows Server 2003. All supported editions of...
  12. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V2.0 (November 9, 2010) Added Microsoft Security Bulletin MS10-087, "Vulnerabilities in Microsoft Office Could Allow Remote Code Execution," to the Updates relating to Insecure Library Loading section. Advisory Summary:Microsoft is aware that research has been published detailing...
  13. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution

    Revision Note: V1.1 (August 31, 2010) Added a link to Microsoft Knowledge Base Article 2264107 to provide an automated Microsoft Fix it solution for the workaround, Disable loading of libraries from WebDAV and remote network shares.Summary: Microsoft is aware that research has been published...
  14. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution

    Revision Note: V1.1 (August 31, 2010) Added a link to Microsoft Knowledge Base Article 2264107 to provide an automated Microsoft Fix it solution for the workaround, Disable loading of libraries from WebDAV and remote network shares.Summary: Microsoft is aware that research has been published...
  15. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V1.1 (August 31, 2010) Added a link to Microsoft Knowledge Base Article 2264107 to provide an automated Microsoft Fix it solution for the workaround, Disable loading of libraries from WebDAV and remote network shares. Advisory Summary:Microsoft is aware that research has been...
  16. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution

    Revision Note: V1.0 (August 23, 2010) Advisory published.Summary: Microsoft is aware that research has been published detailing a remote attack vector for a class of vulnerabilities that affects how applications load external libraries. Link Removed due to 404 Error
  17. News

    Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -

    Revision Note: V1.0 (August 23, 2010) Advisory published. Advisory Summary:Microsoft is aware that research has been published detailing a remote attack vector for a class of vulnerabilities that affects how applications load external libraries. Link Removed due to 404 Error