CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1617

Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.037

EPSS Ranking 87.2%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2004-1617

University Of Kansas » Lynx » Version: 2.7

cpe:2.3:a:university_of_kansas:lynx:2.7
University Of Kansas » Lynx » Version: 2.8

cpe:2.3:a:university_of_kansas:lynx:2.8
University Of Kansas » Lynx » Version: 2.8.1

cpe:2.3:a:university_of_kansas:lynx:2.8.1
University Of Kansas » Lynx » Version: 2.8.2_rel1

cpe:2.3:a:university_of_kansas:lynx:2.8.2_rel1
University Of Kansas » Lynx » Version: 2.8.3

cpe:2.3:a:university_of_kansas:lynx:2.8.3
University Of Kansas » Lynx » Version: 2.8.3_dev22

cpe:2.3:a:university_of_kansas:lynx:2.8.3_dev22
University Of Kansas » Lynx » Version: 2.8.3_pre5

cpe:2.3:a:university_of_kansas:lynx:2.8.3_pre5
University Of Kansas » Lynx » Version: 2.8.3_rel1

cpe:2.3:a:university_of_kansas:lynx:2.8.3_rel1
University Of Kansas » Lynx » Version: 2.8.4

cpe:2.3:a:university_of_kansas:lynx:2.8.4
University Of Kansas » Lynx » Version: 2.8.4_rel1

cpe:2.3:a:university_of_kansas:lynx:2.8.4_rel1
University Of Kansas » Lynx » Version: 2.8.5

cpe:2.3:a:university_of_kansas:lynx:2.8.5
University Of Kansas » Lynx » Version: 2.8.5_dev2

cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev2
University Of Kansas » Lynx » Version: 2.8.5_dev3

cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev3
University Of Kansas » Lynx » Version: 2.8.5_dev4

cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev4
University Of Kansas » Lynx » Version: 2.8.5_dev5

cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev5
University Of Kansas » Lynx » Version: 2.8.5_dev8

cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1617

Products

Pricing

Contact Us