Skip to content
OpenAdvisories
Unscored CVE-2010-2810 EUVD-2010-2814GHSA-9h97-c3c6-r77v

Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 al…

Published Aug 20, 2010 · Updated Aug 7, 2024 · Assigned by redhat

Description

Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed URL containing a % (percent) character in the domain name.

References