[JoachimSchipper]

It's a generic vulnerability; any program that loads DLLs while the current directory is untrusted has the same problem.