KeyView 24.4
KeyView XML Export SDK C Programming Guide

# Mitigate Against DLL Pre-Loading

When an application loads a shared library such as `kvhtml.dll` or `kvhtml.so`, the Operating System or runtime linker might search several locations. This search can allow DLL pre-loading attacks if an attacker is able to place a malicious binary in one of the locations searched. It might also lead to unexpected results if a different version of KeyView is present in one of the locations searched.

On Windows, when you load `kvhtml.dll` with LoadLibrary, OpenText recommends that you use a fully qualified path to prevent Windows searching for the library in other locations.

On other platforms, when you load `kvhtml.so` with dlopen, OpenText recommends that you use an absolute path to prevent the OS or runtime linker searching for the library in other locations.

Copyright 1997-2024 Open Text
Version 24.4 | Last updated September 2024

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: IDOL KeyView 24.4

Topic Title: Mitigate Against DLL Pre-Loading