Lucene search

K
cve[email protected]CVE-2006-3438
HistoryAug 09, 2006 - 12:04 a.m.

CVE-2006-3438

2006-08-0900:04:00
NVD-CWE-noinfo
web.nvd.nist.gov
23
microsoft
hyperlink object library
hlink.dll
vulnerability
buffer overflow
user-assisted
arbitrary code
nvd

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.5%

Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll “uses a file containing a malformed function,” aka “Hyperlink Object Function Vulnerability.”

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.5%

Related for CVE-2006-3438