module: std
package: syscall
versions:
  - fixed: go1.5.4
  - fixed: go1.6.1
description: |
  Untrusted search path vulnerability on Windows related to LoadLibrary allows
  local users to gain privileges via a malicious DLL in the current working
  directory.
cves:
  - CVE-2016-3958
symbols:
  - LoadLibrary
links:
  commit: https://go.googlesource.com/go/+/6a0bb87bd0bf0fdf8ddbd35f77a75ebd412f61b0
  pr: https://go.dev/cl/21428
  context:
  - https://go.dev/issue/14959
  - https://groups.google.com/g/golang-announce/c/9eqIHqaWvck