CVE-2005-3120

CRITICAL

Lynx <2.8.6 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Ulf Harnhammar · perldosmultiple

https://www.exploit-db.com/exploits/1256

View Code ZIP pw:eip

github NO CODE

by gitcollect · cpoc

https://github.com/gitcollect/CVE_Exploits/tree/master/cve-2005-3120

View Code ZIP pw:eip

References (35)

[Broken Link] ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.7/SCOSA-2006.7.txt

[Broken Link] ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.47/SCOSA-2005.47.txt

[Broken Link, Patch, Vendor Advisory] http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038019.html

[Broken Link] http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html

[Broken Link] http://secunia.com/advisories/17150

[Broken Link] http://secunia.com/advisories/17216

[Broken Link] http://secunia.com/advisories/17230

[Broken Link] http://secunia.com/advisories/17231

[Broken Link] http://secunia.com/advisories/17238

[Broken Link] http://secunia.com/advisories/17248

[Broken Link] http://secunia.com/advisories/17340

[Broken Link] http://secunia.com/advisories/17360

[Broken Link] http://secunia.com/advisories/17444

[Broken Link] http://secunia.com/advisories/17445

[Broken Link] http://secunia.com/advisories/17480

[Broken Link] http://secunia.com/advisories/18376

[Broken Link] http://secunia.com/advisories/18584

[Broken Link] http://secunia.com/advisories/20383

[Broken Link, Third Party Advisory, VDB Entry] http://securitytracker.com/id?1015065

[Broken Link] http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.423056

... and 15 more

Scores

CVSS v3 9.8

EPSS 0.3044

EPSS Percentile 96.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-131

Status published

Products (3)

debian/debian_linux 3.0

debian/debian_linux 3.1

invisible-island/lynx < 2.8.6

Published Oct 17, 2005

Tracked Since Feb 18, 2026