{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T02:28:27.672","vulnerabilities":[{"cve":{"id":"CVE-2006-3438","sourceIdentifier":"secure@microsoft.com","published":"2006-08-09T00:04:00.000","lastModified":"2026-04-16T00:27:16.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll \"uses a file containing a malformed function,\" aka \"Hyperlink Object Function Vulnerability.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Microsoft Hyperlink Object Library (hlink.dll), posiblemente un desbordamiento de búfer, permite a atacantes con la intervención del usuario ejecutar código de su elección mediante hiperenlaces manipulados que no son manejados adecuadamente cuando hlink.dll \"utiliza un archivo que contiene una función mal formada\" también conocida como \"Vulnerabilidad de Función de Objeto Hiperenlace\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:hyperlink_object_library:*:*:*:*:*:*:*:*","matchCriteriaId":"BC8470B2-118A-4A5E-94CA-636BFA8A75F6"}]}]}],"references":[{"url":"http://securitytracker.com/id?1016659","source":"secure@microsoft.com"},{"url":"http://www.kb.cert.org/vuls/id/683612","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/19405","source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-220A.html","source":"secure@microsoft.com","tags":["Patch","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050","source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115","source":"secure@microsoft.com"},{"url":"http://securitytracker.com/id?1016659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/683612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/19405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-220A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}