CVE-2005-3120
Critical · 9.8CVSS
9.8
EPSS
23.3%
Published
Oct 17, 2005
CISA due date
—
The record
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:11 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:12 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:13 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:3.0 | lynx | 0 | 2.8.4.1b-3.3 |
| Debian:3.0 | lynx | 0 | 2.8.4.1b-3.2 |
| Debian:3.0 | lynx-cur | 0 | 2.8.5-2.5woody1 |
| Debian:3.1 | lynx | 0 | 2.8.5-2sarge1 |
| Debian:3.1 | lynx-cur | 0 | 2.8.6-9sarge1 |
| Red Hat:enterprise_linux:3::as | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::as | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::desktop | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::desktop | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::es | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::es | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::ws | lynx | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:3::ws | lynx-debuginfo | 0 | 0:2.8.5-11.1 |
| Red Hat:enterprise_linux:4::as | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::as | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::desktop | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::desktop | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::es | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::es | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::ws | lynx | 0 | 0:2.8.5-18.1 |
| Red Hat:enterprise_linux:4::ws | lynx-debuginfo | 0 | 0:2.8.5-18.1 |
Related vulnerabilities
- CVE-2026-18743 A flaw was found in popt. CWE-131
- CVE-2026-78002 A flaw was found in rsyslog. CWE-131
- CVE-2026-65706 FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the… CWE-131
- CVE-2026-65705 FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the… CWE-131
- CVE-2026-54696 Ruby JSON is a JSON implementation for Ruby. CWE-131
- CVE-2026-46521 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-131
- CVE-2026-11604 An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win… CWE-131
- CVE-2026-49841 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-131