oss-sec mailing list archives

CVE request: Lynx

From: Dan Rosenberg <dan.j.rosenberg () gmail com>
Date: Mon, 9 Aug 2010 10:17:45 -0400

The Lynx browser is vulnerable to a heap overflow when parsing
malformed URLs with a "%" character in the last two characters of the
hostname.

Reference:
https://bugs.launchpad.net/ubuntu/+source/lynx-cur/+bug/613254

-Dan

Current thread:

CVE request: Lynx Dan Rosenberg (Aug 09)
- Re: CVE request: Lynx Josh Bressers (Aug 09)