VULNERABILITY INTELLIGENCE

CVE-2006-3438

CVSS score9.3 NONE
EPSS probability11.82%
CISA KEVNot currently listed
Published2006-08-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references