Microsoft Patch KB2264107

[Geert Janssens]

Hi,

Thank you for the heads up.

On Sunday 29 August 2010, Doug (Gmail) wrote:
> Microsoft has issued a new Windows Update to test restrictions on DLL
> loading in response to the recent disclosures of Windows DLL loading
> vulnerabilities affecting hundreds of Windows apps.
> 
> http://support.microsoft.com/kb/2264107
> 
> In the most restrictive mode (CWDIllegalInDllSearch = 0xFFFFFFFF)
> GnuCash for Windows breaks on startup, unable to find glib libraries.
> The fix probably involves setting an explicit DLL search path via an
> API call.
> 
Have you actually tried this ?

From reading the kb article I don't see how that could happen. In the most 
restricted configuration only the current working directory should be removed 
from the DLL search path. But all DLL's we use are either in the application's 
directory, or found via the PATH variable.

I did not test it yet myself though.

Geert