4 matches found
Lynx <= 2.8.6dev.13 Remote Buffer Overflow Exploit (port bind)
No description provided by source...
CVE-2002-1405
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters...
Lynx < 2.8.5 dev 6 Syslog URI Format String
Binary data 1737.prm...
CVE-1999-1549
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands...