CVE-2005-3120

Critical

Published: 17/10/2005(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Risk Assessment

An attacker can remotely execute arbitrary code on the victim's system, leading to full compromise of the Lynx application and potentially the entire system.

Recommendation

Immediately upgrade Lynx to a version later than 2.8.6, which includes a fix for this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.