Privilege Escalation Through DLL Preloading Attack

puppet gem is vulnerable to privilege escalation. It does not prevent the loading of DLL modules from the directories created by any authenticated users on Windows, thereby allowing the user to load attacker-controlled DLL modules...