CVE

Id
19190  
CVE No.
CVE-2006-3086  
Status
Candidate  
Description
Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode, aka "Hyperlink COM Object Buffer Overflow Vulnerability." NOTE: this is a different issue than CVE-2006-3059.  
Phase
Assigned (20060619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
171295 19190 CVE-2006-3086 BUGTRAQ:20060622 MS Excel Remote Code Execution POC Exploit  View
171296 19190 CVE-2006-3086 URL:http://www.securityfocus.com/archive/1/archive/1/438057/100/0/threaded  View
171297 19190 CVE-2006-3086 BUGTRAQ:20060622 RE: MS Excel Remote Code Execution POC Exploit  View
171298 19190 CVE-2006-3086 URL:http://www.securityfocus.com/archive/1/archive/1/438093/100/0/threaded  View
171299 19190 CVE-2006-3086 BUGTRAQ:20060622 Re: MS Excel Remote Code Execution POC Exploit  View
171300 19190 CVE-2006-3086 URL:http://www.securityfocus.com/archive/1/archive/1/438096/100/0/threaded  View
171301 19190 CVE-2006-3086 BUGTRAQ:20060623 Re: Re: MS Excel Remote Code Execution POC Exploit  View
171302 19190 CVE-2006-3086 URL:http://www.securityfocus.com/archive/1/archive/1/438156/100/0/threaded  View
171303 19190 CVE-2006-3086 BUGTRAQ:20060623 Re: MS Excel Remote Code Execution POC Exploit  View
171304 19190 CVE-2006-3086 URL:http://www.securityfocus.com/archive/1/archive/1/438373/100/0/threaded  View
171305 19190 CVE-2006-3086 BUGTRAQ:20060808 TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability  View
171306 19190 CVE-2006-3086 URL:http://www.securityfocus.com/archive/1/archive/1/442724/100/0/threaded  View
171307 19190 CVE-2006-3086 FULLDISC:20060618 ***ULTRALAME*** Microsoft Excel Unicode Overflow  View
171308 19190 CVE-2006-3086 URL:http://marc.info/?l=full-disclosure&m=115067840426070&w=2  View
171309 19190 CVE-2006-3086 MISC:http://www.tippingpoint.com/security/advisories/TSRT-06-10.html  View
171310 19190 CVE-2006-3086 MILW0RM:1927  View
171311 19190 CVE-2006-3086 URL:http://milw0rm.com/exploits/1927  View
171312 19190 CVE-2006-3086 MISC:http://blogs.technet.com/msrc/archive/2006/06/20/437826.aspx  View
171313 19190 CVE-2006-3086 MS:MS06-050  View
171314 19190 CVE-2006-3086 URL:http://www.microsoft.com/technet/security/bulletin/ms06-050.mspx  View
171315 19190 CVE-2006-3086 CERT-VN:VU#394444  View
171316 19190 CVE-2006-3086 URL:http://www.kb.cert.org/vuls/id/394444  View
171317 19190 CVE-2006-3086 BID:18500  View
171318 19190 CVE-2006-3086 URL:http://www.securityfocus.com/bid/18500  View
171319 19190 CVE-2006-3086 VUPEN:ADV-2006-2431  View
171320 19190 CVE-2006-3086 URL:http://www.vupen.com/english/advisories/2006/2431  View
171321 19190 CVE-2006-3086 OSVDB:26666  View
171322 19190 CVE-2006-3086 URL:http://www.osvdb.org/26666  View
171323 19190 CVE-2006-3086 OVAL:oval:org.mitre.oval:def:999  View
171324 19190 CVE-2006-3086 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:999  View
171325 19190 CVE-2006-3086 SECTRACK:1016339  View
171326 19190 CVE-2006-3086 URL:http://securitytracker.com/id?1016339  View
171327 19190 CVE-2006-3086 SECUNIA:20748  View
171328 19190 CVE-2006-3086 URL:http://secunia.com/advisories/20748  View
171329 19190 CVE-2006-3086 XF:excel-hlink-bo(27224)  View

Related JVN