Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lynx NNTP文章首部处理缓冲区溢出漏洞
Vulnerability Description
Lynx是一个基于文本的WWW浏览器。它不能够显示图像或Java句柄，所以执行速度非常快。 Lynx在处理某些畸形的NNTP文章首部时存在缓冲区溢出，成功利用这个漏洞的攻击者可以完全控制EIP、EBX、EBP、ESI和EDI，导致在目标系统中执行任意代码。当Lynx连接到NNTP服务器获取新闻组中的文章时，会用某些文章首部的信息调用HTrjis()函数。该函数将缺失的ESC字符添加到某些数据以支持亚洲字符组。但是，函数没有检查是否将字符写到了字符数组缓冲区之外，导致栈溢出。
CVSS Information
N/A
Vulnerability Type
N/A