Buffer Overflow Vulnerability in Microsoft Hyperlink Object Library

CVE-2006-3086

What is CVE-2006-3086?

A buffer overflow vulnerability exists in the HrShellOpenWithMonikerDisplayName function within Microsoft Hyperlink Object Library (hlink.dll). This flaw can be exploited by remote attackers through specially crafted hyperlinks, allowing for denial of service attacks or potential arbitrary code execution. The vulnerability manifests itself when the input exceeds the buffer size, particularly when Unicode links are utilized. Attackers may leverage this weakness in Excel worksheets, potentially leading to system crashes or unauthorized actions within affected applications.

References