CVE-2005-3120
Critical · 9.8CVSS
9.8
EPSS
23.3%
Published
Oct 17, 2005
CISA due date
—
The record
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:11 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:12 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:13 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:3.0 | lynx | 0 | 2.8.4.1b-3.3 |
| Debian:3.0 | lynx | 0 | 2.8.4.1b-3.2 |
| Debian:3.0 | lynx-cur | 0 | 2.8.5-2.5woody1 |
| Debian:3.1 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:3.1 | lynx-cur | 0 | 2.8.6-9sarge1 |
| Red Hat:enterprise_linux:3::as | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::as | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::desktop | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::desktop | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::es | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::es | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::ws | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::ws | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:4::as | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::as | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::desktop | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::desktop | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::es | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::es | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::ws | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::ws | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
Related vulnerabilities
- CVE-2016-9179 lynx: It was found that Lynx doesn't parse the authority component of the URL correctly… Also affects lynx
- CVE-2026-106574 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-131
- CVE-2026-88830 A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a… CWE-131
- CVE-2026-84448 libheif is a HEIF and AVIF file format decoder and encoder. CWE-131
- CVE-2026-22590 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard… CWE-131
- CVE-2026-78221 An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN… CWE-131
- CVE-2026-18743 A flaw was found in popt. CWE-131
- CVE-2026-78002 A flaw was found in rsyslog. CWE-131