Bugtraq mailing list archives
Re: Fwd: Re: Double clicking on MS Office documents from Windows Explorer mayexecute arbitrary programs in some cases
From: Brett Glass <brett () LARIAT ORG>
Date: Thu, 21 Sep 2000 16:56:15 -0600
I was very hopeful when I read this. Unfortunately, while it is useful, it does not seem to be a solution to the problem at hand. It does provide a good way to avoid DLL name collisions and version conflicts by allowing each app to keep a preferred version in its own directory. But it does not remove "." from the search path if the required DLL is not found there. As the last paragraph says, the "normal" search path is used. Darn. So close and yet so far. --Brett Glass At 11:43 AM 9/20/2000, Chip Andrews wrote:
More resources for a possible solution for the MS Office document issue....From MSDN:"Activating DLL/COM Redirection DLL/COM redirection is activated on an application-by-application basis by the presence of a ".local" file. The ".local" file is an empty file in the same directory as the application's .exe file, with the same name as the application's .exe file with ".local" appended to the end of the name. For example, to activate DLL/COM redirection for an application called "myapp.exe," create an empty file called "myapp.exe.local" in the same directory where myapp.exe is installed. Once DLL/COM redirection is activated, whenever the application loads a DLL or an OCX, Windows looks first for the DLL or OCX in the directory where the application's .exe file is installed. If a version of the DLL or OCX is found in the directory where the application's .exe file is installed, the application uses it regardless of any directory path specified in the application or the registry. If a version of the DLL or OCX is not found in the directory where the application's .exe file is installed, the normal search path or server path is used. " http://msdn.microsoft.com/library/techart/sidebyside.htm Chip Andrews, MCSE+I, MCSD, MCDBA Software Architect Clarus Corporation; www.claruscorp.com andrewsc () claruscorp com
Current thread:
- Fwd: Re: Double clicking on MS Office documents from Windows Explorer mayexecute arbitrary programs in some cases http-equiv () excite com (Sep 20)
- <Possible follow-ups>
- Fwd: Re: Double clicking on MS Office documents from Windows Explorer mayexecute arbitrary programs in some cases Chip Andrews (Sep 21)
- Re: Fwd: Re: Double clicking on MS Office documents from Windows Explorer mayexecute arbitrary programs in some cases Brett Glass (Sep 22)