CVE-2006-3438
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer...
CVE-2006-3438 is a high vulnerability (CVSS 9.3) in Microsoft Hyperlink Object Library, published August 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.8%, the 96th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 11.8%EPSS, 96th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
CVE-2006-3438- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
CVE-2006-3438- Updated
- 2026-11-02
EUVDEUVD-2006-3434No score
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
EUVD-2006-3434- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grj9-5jfw-83hgNo score
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer...
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
- Record
GHSA-grj9-5jfw-83hg- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1016659
securityfocus.com/bid/19405
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115
kb.cert.org/vuls/id/683612
us-cert.gov/cas/techalerts/TA06-220A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050
nvd.nist.gov/vuln/detail/CVE-2006-3438
github.com/advisories/GHSA-grj9-5jfw-83hg