Re: CVE request: Lynx

[Josh Bressers <bressers () redhat com>]

----- "Dan Rosenberg" <dan.j.rosenberg () gmail com> wrote:

> The Lynx browser is vulnerable to a heap overflow when parsing
> malformed URLs with a "%" character in the last two characters of the
> hostname.
>
> Reference:
> https://bugs.launchpad.net/ubuntu/+source/lynx-cur/+bug/613254

Please use CVE-2010-2810 for this.

> From investigating this issue a bit, it looks like the flaw was introduced
in lynx version 2.8.8dev.1. The functionality that triggers this doesn't
exist in any of the previous versions.

Thanks.

-- 
    JB