Exam 312-50v12 topic 1 question 246 discussion

A. DLL Hijacking CEHv12 Book Module 6 p.711 Most Windows applications do not use the fully qualified path when loading an external DLL library; instead, they first search the directory from which they have been loaded. Taking this as an advantage, if attackers can place a malicious DLL in the application directory, the application will execute the malicious DLL in place of the real DLL. For example, if an application program “.exe” needs library.dll (usually in the Windows system directory) to install the application, and fails to specify the library.dll path, Windows will search for the DLL in the directory from which the application was launched. If an attacker has already placed the DLL in the same directory as program.exe, then that malicious DLL will load instead of the real DLL, which allows the attacker to gain remote access to the target system.

A. DLL Hijacking (Module 06 page 711)

Could someone help me confirm if this is correct

Is this answer accurate friends