CVE-2000-0209
HighExploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
Risk Assessment
Attackers may exploit this vulnerability to remotely take control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Lynx to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Lynx 2.x
See all- CVE-2016-9179High
It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?'. This could lead to the program connecting to a different host.
- CVE-1999-1549High
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a 'secure' hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
- CVE-1999-0371Low
Lynx allows a local user to overwrite sensitive files through /tmp symlinks.
Original NVD description (English source)
Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.