PT-2006-3987 · Microsoft · Hyperlink Object Library+1

Pedram Amini · Published 2006-06-19 · Updated 2018-10-18 · CVE-2006-3086

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Hyperlink Object Library (hlink.dll) (affected versions not specified)

Description The issue is related to a stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function, allowing remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink. This can be exploited by constructing a malicious hyperlink, potentially leading to remote code execution if a user clicks the link within an Office file or email message, giving an attacker complete control of the affected system. User interaction is required to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-3086

Affected Products

Hyperlink Object Library

Windows

References · 33

• 🔥 http://securityfocus.com/bid/18500 · Exploit
• 🔥 https://exploit-db.com/exploits/1927 · Exploit
• http://secunia.com/advisories/20748 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3086 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3086 · Security Note
• http://securitytracker.com/id?1016339 · Patch
• http://tippingpoint.com/security/advisories/TSRT-06-10.html · Vendor Advisory
• http://milw0rm.com/exploits/1927 · Note
• http://xforce.iss.net/xforce/xfdb/27224 · Note
• http://securityfocus.com/archive/1/archive/1/438057/100/0/threaded · Note
• http://securityfocus.com/archive/1/438156/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/438156/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A999 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:999 · Note