Debian Security Advisory DSA 1077-1 (lynx-ssl)

The remote host is missing an update to lynx-ssl announced via advisory DSA 1077-1. OpenVAS Vulnerability Test $Id: deb10771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1077-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1077-1 : lynx-ssl - programming error

Michal Zalewski discovered that lynx, the popular text-mode WWW Browser, is not able to grok invalid HTML including a TEXTAREA tag with a large COLS value and a large tag name in an element that is not terminated, and loops forever trying to render the broken HTML. The same code is present in...