UPDF DLL Search Path Hijacking Vulnerability Allowing Arbitrary Code Execution

A DLL search path hijacking vulnerability has been identified in the UPDF.exe executable for Windows, specifically in version 1.8.5.0. This vulnerability allows attackers with local access to execute arbitrary code by placing a malicious FREngine.dll file in the 'C:\Users\<user>\AppData\Local\UPDF\FREngine\Bin64\' directory. The exploitation of this vulnerability could lead to unauthorized code execution and persistence on the affected system.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.