CVE-2006-3438
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer...
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
CVE-2006-3438- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
CVE-2006-3438- Updated
- 2026-11-02
EUVDEUVD-2006-3434 No score
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
EUVD-2006-3434- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grj9-5jfw-83hg No score
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer...
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
GHSA-grj9-5jfw-83hg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3438 is a high vulnerability (CVSS 9.3) in Microsoft Hyperlink Object Library, published August 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.8%, the 96th percentile. No source names a fixed version.
References
securitytracker.com/id?1016659
securityfocus.com/bid/19405
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115
kb.cert.org/vuls/id/683612
us-cert.gov/cas/techalerts/TA06-220A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050
nvd.nist.gov/vuln/detail/CVE-2006-3438
github.com/advisories/GHSA-grj9-5jfw-83hg