1039
[REF-413]"Dynamic-Link Library Security". 2010 September 2. Microsoft. < https://
learn.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-security >.2023-04-07.
[REF-414]"An update on the DLL-preloading remote attack vector". 2010 August 1. Microsoft. <
https://msrc.microsoft.com/blog/2010/08/an-update-on-the-dll-preloading-remote-attack-vector/
>.2023-04-07.
[REF-415]"Insecure Library Loading Could Allow Remote Code Execution".
2010 August 3. Microsoft. < https://learn.microsoft.com/en-us/security-updates/
securityadvisories/2010/2269637#insecure-library-loading-could-allow-remote-code-execution
>.2023-04-07.
[REF-416]HD Moore. "Application DLL Load Hijacking". 2010 August 3. < https://www.rapid7.com/
blog/?p=5325 >.2023-04-07.
[REF-417]Oliver Lavery. "DLL Hijacking: Facts and Fiction". 2010 August 6. < https://
threatpost.com/dll-hijacking-facts-and-fiction-082610/74384/ >.2023-04-07.
[REF-1168]Catalin Cimpanu. "Microsoft warns enterprises of new 'dependency confusion' attack
technique". ZDNet. 2021 February 0. < https://www.zdnet.com/article/microsoft-warns-enterprisesof-
new-dependency-confusion-attack-technique/ >.
[REF-1169]Alex Birsan. "Dependency Confusion: How I Hacked Into Apple, Microsoft and
Dozens of Other Companies". 2021 February 9. < https://medium.com/@alex.birsan/dependencyconfusion-
4a5d60fec610 >.
[REF-1170]Microsoft. "3 Ways to Mitigate Risk When Using Private Package Feeds". 2021
February 9. < https://azure.microsoft.com/mediahandler/files/resourcefiles/3-ways-to-mitigaterisk-
using-private-package-feeds/3%20Ways%20to%20Mitigate%20Risk%20When%20Using
%20Private%20Package%20Feeds%20-%20v1.0.pdf >.
[REF-1325]"exec package - os/exec - Go Packages". 2023 April 4. < https://pkg.go.dev/os/exec
>.2023-04-21.
[REF-1326]Brian M. Carlson. "Git LFS Changelog". 2022 April 9. < https://github.com/git-lfs/git-lfs/
commit/032dca8ee69c193208cd050024c27e82e11aef81 >.2023-04-21.
CWE-428: Unquoted Search Path or Element
Weakness ID : 428
Structure : Simple
Abstraction : Base
Description
The product uses a search path that contains an unquoted element, in which the element contains
whitespace or other separators. This can cause the product to access resources in a parent path.
Extended Description
If a malicious individual has access to the file system, it is possible to elevate privileges by inserting
such a file as "C:\Program.exe" to be run by a privileged program making use of WinExec.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
CWE Version 4.14
CWE-428: Unquoted Search Path or Element
CWE-428: Unquoted Search Path or Element