Arbitrary code execution via same-named DLL preloading

DLL preloading in HP Printer Firmware Update Utility allows local users with administrative privileges to execute arbitrary code on Windows. The FUU bundle accepts a compromised DLL with the original library's name from the default Downloads directory and executes its code. Exploitation requires administrative access to plant the DLL before the utility loads it, and successful loading runs attacker-controlled code in the utility's context.