OSVDB ID: 11135

Title: Lynx Malformed Tags HTML Rendering DoS

Info

Disclosure

Oct 18, 2004

Discovery

Unknown

Dates

Exploit

Oct 18, 2004

Solution

Unknown

Description

Classification

Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Upgrade
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to version 2.8.6dev.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1011809
Related OSVDB ID: 11134 11136 11137 11138
Bugtraq ID: 11443
ISS X-Force ID: 17804
CVE ID: 2004-1617 (see also: NVD)
Secunia Advisory ID: 20383
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0658.html
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
http://marc.theaimsgroup.com/?l=bugtraq&m=109811406620511&w=2
http://www.securityfocus.com/archive/1/archive/1/435689/30/4740/threaded
Other Advisory URL: http://lcamtuf.coredump.cx/mangleme/gallery/
http://www.debian.org/security/2006/dsa-1076
http://www.debian.org/security/2006/dsa-1077
http://www.debian.org/security/2006/dsa-1085

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/11135