QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-1617

Back to search

CVE-2004-1617

Published: Feb 20, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.

VendorProductVersions

n/a

n/a

affected
n/a

References

11443
vdb-entry
x_refsource_BID
20041018 Web browsers - a mini-farce
mailing-list
x_refsource_BUGTRAQ
DSA-1077
vendor-advisory
x_refsource_DEBIAN
1011809
vdb-entry
x_refsource_SECTRACK
DSA-1076
vendor-advisory
x_refsource_DEBIAN
DSA-1085
vendor-advisory
x_refsource_DEBIAN
20041018 Web browsers - a mini-farce
mailing-list
x_refsource_FULLDISC
20383
third-party-advisory
x_refsource_SECUNIA
lynx-dos(17804)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now