CVE-2005-3120: Buffer Overflow
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3120?
CVE-2005-3120 is classified as a critical security vulnerability due to its potential for remote code execution.
How do I fix CVE-2005-3120?
To fix CVE-2005-3120, update Lynx to version 2.8.7 or later, which contains the necessary patches.
What versions of Lynx are affected by CVE-2005-3120?
CVE-2005-3120 affects Lynx versions 2.8.6 and earlier, including 2.8.3, 2.8.4, and 2.8.6_dev13.
How does CVE-2005-3120 exploit occur?
CVE-2005-3120 exploits a stack-based buffer overflow triggered by malicious article headers containing specific Asian characters.
Are there any known exploits for CVE-2005-3120?
Yes, there are exploits available that leverage CVE-2005-3120 to execute arbitrary code on vulnerable systems.