CVE-1999-0465: Critical severity Lynx Lynx vulnerability
Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable loading/displaying images in Internet Explorer (turn off 'Show pictures' or equivalent) to prevent crashes triggered by malicious IMG tags with large width parameters.
Internet Explorer display images / load external images = disabled - Configuration
Disable image fetching/display in Lynx (run without image retrieval or configure to not display images) to avoid crashes from IMG tags with large width parameters.
Lynx display images / image fetching = disabled - Compensating control
Implement filtering or sanitization of HTML at a proxy/WAF/content filter to block or remove IMG tags or IMG width attributes that could contain excessively large values (strip width parameters or reject HTML with oversized width attributes) before content reaches clients.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0465?
CVE-1999-0465 is considered a moderate severity vulnerability due to its potential to crash affected software.
How do I fix CVE-1999-0465?
To mitigate CVE-1999-0465, ensure that users are using updated versions of Lynx and Internet Explorer that address this vulnerability.
What types of attacks are associated with CVE-1999-0465?
CVE-1999-0465 is associated with denial-of-service attacks, which can cause the affected web browsers to crash.
Which software is affected by CVE-1999-0465?
CVE-1999-0465 affects Lynx and Microsoft Internet Explorer.
Can CVE-1999-0465 be exploited remotely?
Yes, CVE-1999-0465 can be exploited remotely by submitting specially crafted IMG tags with large width parameters.