flux-setup.exe from f.lux suffers from a dll hijacking vulnerability.