Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:hyperlink_object_library:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductHyperlink Object Library (351df4ac-9f4e-5afa-874b-9e07a8c583d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3438 vulnerable 2026-06-08 04:49:09.308363 Details available
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."
Published: 2006-08-09T00:00:00.000Z
Updated: 2024-08-07T18:30:33.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3086 vulnerable 2026-06-08 04:49:08.301662 Details available
Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode, aka "Hyperlink COM Object Buffer Overflow Vulnerability." NOTE: this is a different issue than CVE-2006-3059.
Published: 2006-06-19T19:00:00.000Z
Updated: 2024-08-07T18:16:06.108Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.