Lucene search
K

19 matches found

NVD
NVD
added 2016/02/10 11:59 a.m.17 views

CVE-2016-0059

The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a 1 e-mail message or 2 Office document, aka "Internet Explorer Information Disclosure Vulnerability."...

4.3CVSS4.1AI score0.13958EPSS
Exploits2References2
Prion
Prion
added 2016/02/10 11:59 a.m.19 views

Information disclosure

The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a 1 e-mail message or 2 Office document, aka "Internet Explorer Information Disclosure Vulnerability."...

4.3CVSS6.2AI score0.13958EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2016/02/10 11:0 a.m.21 views

CVE-2016-0059

The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a 1 e-mail message or 2 Office document, aka "Internet Explorer Information Disclosure Vulnerability."...

5AI score0.13958EPSS
Exploits2References2
CVE
CVE
added 2016/02/10 11:0 a.m.54 views

CVE-2016-0059

CVE-2016-0059 affects Microsoft Internet Explorer (Hyperlink Object Library) and enables information disclosure from process memory when a user clicks a crafted URL in an email or Office document. Affected products include IE 9–11; root cause is improper handling of memory objects in the Hyperlin...

4.3CVSS4.8AI score0.13958EPSS
Exploits2References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2016/02/09 12:0 a.m.3 views

Microsoft Internet Explorer Information Disclosure (MS16-009: CVE-2016-0059)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Hyperlink Object Library discloses the contents of its memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted...

4.3CVSS1.7AI score0.13958EPSS
Exploits2
seebug.org
seebug.org
added 2006/10/27 12:0 a.m.17 views

Microsoft超级链接对象库函数溢出漏洞(MS06-050)

Microsoft Windows是微软发布的非常流行的WEB浏览器。 Microsoft Windows的超链接对象库(hlink.dll)中存在远程执行代码漏洞,成功利用此漏洞的攻击者可以完全控制受影响的系统。 要利用此漏洞,需要进行用户交互。 如果超级链接对象库在处理超链接时使用包含畸形的函数的文件,就会出现这个问题。攻击者可以通过构建恶意超链接来利用此漏洞。如果用户单击网站、Office文件或电子邮件中的恶意链接,可能会导致允许远程执行代码。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows...

7.5AI score
Exploits0
CVE
CVE
added 2006/08/09 12:0 a.m.46 views

CVE-2006-3438

CVE-2006-3438 corresponds to a remote code execution vulnerability in the Microsoft Hyperlink Object Library (hlink.dll) that occurs when the library handles a file containing a malformed function while processing hyperlinks. The vulnerability is triggered by user interaction (e.g., clicking a ma...

9.3CVSS7.6AI score0.50728EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2006/08/09 12:0 a.m.17 views

CVE-2006-3438

Unspecified vulnerability in Microsoft Hyperlink Object Library hlink.dll, possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object...

7.6AI score0.50728EPSS
Exploits0References6
Symantec
Symantec
added 2006/08/08 12:0 a.m.12 views

Microsoft Hyperlink Object Library Function Remote Buffer Overflow Vulnerability

Description Microsoft's Hyperlink Object Library is prone to a buffer-overflow vulnerability. This issue is due to the library's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successfully exploiting this issue allows attackers to...

8AI score
Exploits0References2Affected Software3
CERT
CERT
added 2006/06/21 12:0 a.m.30 views

Microsoft Hyperlink Object Library stack buffer overflow

Overview The Microsoft Windows system library for handling hyperlinks contains a buffer overflow. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. Description Microsoft Hyperlink Object Library HLINK.DLL The Hyperlink Object Library provides interfaces for...

9.3CVSS7.2AI score0.59576EPSS
Exploits6References4
NVD
NVD
added 2006/06/19 7:2 p.m.19 views

CVE-2006-3086

Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library hlink.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long...

9.3CVSS7.8AI score0.59576EPSS
Exploits6References18
CVE
CVE
added 2006/06/19 7:0 p.m.65 views

CVE-2006-3086

CVE-2006-3086 is a Hyperlink Object Library buffer overflow in hlink.dll (HrShellOpenWithMonikerDisplayName) that allows remote code execution when a user opens a crafted long hyperlink in Office documents (notably Excel). The issue stems from an unchecked WzCopy into a stack buffer, enabling a l...

9.3CVSS7.8AI score0.59576EPSS
Exploits6References18Affected Software1
Cvelist
Cvelist
added 2006/06/19 7:0 p.m.47 views

CVE-2006-3086

Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library hlink.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long...

7.8AI score0.59576EPSS
Exploits6References18
Tenable Nessus
Tenable Nessus
added 2006/06/13 12:0 a.m.32 views

MS06-022: Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439)

The remote host is running a version of Windows that contains a flaw in the Hyperlink Object Library. An attacker may exploit this flaw to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to construct a malicious hyperlink and lure a victim into clicking it...

6.8CVSS6.2AI score0.62366EPSS
Exploits0References2
NVD
NVD
added 2005/05/02 4:0 a.m.14 views

CVE-2005-0057

The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow...

7.5CVSS7.8AI score0.64124EPSS
Exploits0References10
securityvulns
securityvulns
added 2005/02/09 12:0 a.m.31 views

Microsoft Windows Hyperlink Object Library buffer overflow

No description provided...

2.3AI score
Exploits0References2
CVE
CVE
added 2005/02/08 5:0 a.m.53 views

CVE-2005-0057

Microsoft’s MS05-015 fixes a remote code execution flaw in the Hyperlink Object Library (Hlink.dll) affecting Windows 98, 2000, XP, and Server 2003. The vulnerability arises from an unchecked buffer when handling hyperlinks, potentially allowing arbitrary code execution if a user clicks a crafted...

7.5CVSS7.9AI score0.64124EPSS
Exploits0References10Affected Software6
Cvelist
Cvelist
added 2005/02/08 5:0 a.m.18 views

CVE-2005-0057

The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow...

7.8AI score0.64124EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2005/02/08 12:0 a.m.18 views

MS05-015: Vulnerability in the Hyperlink Object Library may allow code execution (888113)

The remote host is running a version of Windows that contains a flaw in the Hyperlink Object Library that can be abused to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to construct a malicious hyperlink and lure a victim into clicking it. C Tenable Netwo...

7.5CVSS5.8AI score0.64124EPSS
Exploits0References2
Rows per page
Query Builder