What is the severity of CVE-2006-3086?

CVE-2006-3086 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2006-3086?

To mitigate CVE-2006-3086, users should update the affected Microsoft Hyperlink Object Library to the latest version provided by Microsoft.

What are the potential impacts of CVE-2006-3086?

The potential impacts of CVE-2006-3086 include denial of service through application crashes and possible execution of arbitrary code.

Which software is affected by CVE-2006-3086?

CVE-2006-3086 affects Microsoft Hyperlink Object Library (hlink.dll), which is used in various Microsoft applications.

Can CVE-2006-3086 be exploited remotely?

Yes, CVE-2006-3086 can be exploited remotely by attackers using malicious hyperlinks to trigger the buffer overflow.

Vulnerability/
CVE-2006-3086

critical

9.3

CWE

119

19/6/2006

7/8/2024

CVE-2006-3086: Buffer Overflow

First published: Mon Jun 19 2006(Updated: )

Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode, aka "Hyperlink COM Object Buffer Overflow Vulnerability." NOTE: this is a different issue than CVE-2006-3059.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Microsoft Hyperlink Object Library

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2006-3086?
CVE-2006-3086 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2006-3086?
To mitigate CVE-2006-3086, users should update the affected Microsoft Hyperlink Object Library to the latest version provided by Microsoft.
What are the potential impacts of CVE-2006-3086?
The potential impacts of CVE-2006-3086 include denial of service through application crashes and possible execution of arbitrary code.
Which software is affected by CVE-2006-3086?
CVE-2006-3086 affects Microsoft Hyperlink Object Library (hlink.dll), which is used in various Microsoft applications.
Can CVE-2006-3086 be exploited remotely?
Yes, CVE-2006-3086 can be exploited remotely by attackers using malicious hyperlinks to trigger the buffer overflow.

collector/nvd-historical
vendor/microsoft
product/hyperlink object library
canonical/microsoft hyperlink object library
collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/remedy
agent/weakness
agent/last-modified-date
agent/severity
agent/description
agent/first-publish-date
agent/event
agent/tags
agent/source

Frequently Asked Questions

What is the severity of CVE-2006-3086?
CVE-2006-3086 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2006-3086?
To mitigate CVE-2006-3086, users should update the affected Microsoft Hyperlink Object Library to the latest version provided by Microsoft.
What are the potential impacts of CVE-2006-3086?
The potential impacts of CVE-2006-3086 include denial of service through application crashes and possible execution of arbitrary code.
Which software is affected by CVE-2006-3086?
CVE-2006-3086 affects Microsoft Hyperlink Object Library (hlink.dll), which is used in various Microsoft applications.
Can CVE-2006-3086 be exploited remotely?
Yes, CVE-2006-3086 can be exploited remotely by attackers using malicious hyperlinks to trigger the buffer overflow.

CVE-2006-3086: Buffer Overflow

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2006-3086?

How do I fix CVE-2006-3086?

What are the potential impacts of CVE-2006-3086?

Which software is affected by CVE-2006-3086?

Can CVE-2006-3086 be exploited remotely?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2006-3086?

How do I fix CVE-2006-3086?

What are the potential impacts of CVE-2006-3086?

Which software is affected by CVE-2006-3086?

Can CVE-2006-3086 be exploited remotely?