Denial Of Service (DoS)

elinks is vulnerable to denial of service (DoS). The vulnerability exists as a off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A remote attacker could use this flaw to create a specially-crafted HTML file that would cause ELinks to crash or, possibly, execute arbitrary code when rendered.