CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

23.26% chance of exploitation in the next 30 days, 98th percentile

Published

2005-10-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1256

References

• CVE Record
• NVD entry

Related

• CVE-2005-3116
• CVE-2005-3127
• CVE-2005-3098
• CVE-2005-3128
• CVE-2005-3083
• CVE-2005-3130