7 matches found
Microsoft超级链接对象库函数溢出漏洞(MS06-050)
Microsoft Windows是微软发布的非常流行的WEB浏览器。 Microsoft Windows的超链接对象库(hlink.dll)中存在远程执行代码漏洞,成功利用此漏洞的攻击者可以完全控制受影响的系统。 要利用此漏洞,需要进行用户交互。 如果超级链接对象库在处理超链接时使用包含畸形的函数的文件,就会出现这个问题。攻击者可以通过构建恶意超链接来利用此漏洞。如果用户单击网站、Office文件或电子邮件中的恶意链接,可能会导致允许远程执行代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows...
Microsoft HLINK.DLL链接内存破坏漏洞(MS06-050)
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的hlink.dll在处理超级链接时存在栈溢出漏洞。攻击者可以通过构建恶意超链接来利用此漏洞。如果用户单击网站、Office文件或电子邮件中的恶意链接,可能会导致允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。要利用此漏洞,需要进行用户交互。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003...
TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability
TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-10.html August 8, 2006 -- CVE ID: CVE-2006-3086 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Windows Server 2003 SP1 and SP2 Microsoft...
Microsoft Office code execution
hlink.dll and Excel styles vulnerability, vulnerabilities in different record types processing are used to install malicious software in-the-wild...
CVE-2006-3438
CVE-2006-3438 corresponds to a remote code execution vulnerability in the Microsoft Hyperlink Object Library (hlink.dll) that occurs when the library handles a file containing a malformed function while processing hyperlinks. The vulnerability is triggered by user interaction (e.g., clicking a ma...
[Full-disclosure] TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability
TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-10.html August 8, 2006 -- CVE ID: CVE-2006-3086 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Windows Server 2003 SP1 and SP2 Microsoft...
msword-hlink-ohday.txt
Hi people, the same problem concerning hlink.dll already exploited in excel is present even in Microsoft Word, but Word 2003 seems, luckily, not vulnerable. this one is the public 0-day I made for Microsoft Word. the author is "SYS 49152" obviusly it's a local sploit .. best regards. SYS 49152...