← Database

CVE-2006-3438

CRITICAL CVSS: 9.3 Published: 2006-08-09 Modified: 2026-06-16

Description

Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."

Affected Platforms

Microsoft Hyperlink Object Library

Weakness Type

NVD-CWE-noinfo

References