CVE-2004-1617
published 2004-10-18CVE-2004-1617: Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains…
PriorityP416medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.75%
88.5th percentile
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | lynx | < lynx 2.8.5-2sarge1.2 (bookworm) | lynx 2.8.5-2sarge1.2 (bookworm) |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | — | — |
| university_of_kansas | lynx | >= 0 < 2.8.5-2sarge1.2 | 2.8.5-2sarge1.2 |
| university_of_kansas | lynx | >= 0 < 2.8.5-2sarge1.2 | 2.8.5-2sarge1.2 |
| university_of_kansas | lynx | >= 0 < 2.8.5-2sarge1.2 | 2.8.5-2sarge1.2 |
| university_of_kansas | lynx | >= 0 < 2.8.5-2sarge1.2 | 2.8.5-2sarge1.2 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j8fp-ff64-g7r6: Lynx, lynx-ssl, and lynx-cur before 2
ghsa_unreviewed·2022-04-29
CVE-2004-1617 [MEDIUM] CWE-20 GHSA-j8fp-ff64-g7r6: Lynx, lynx-ssl, and lynx-cur before 2
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.
OSV
CVE-2004-1617: Lynx, lynx-ssl, and lynx-cur before 2
osv·2004-10-18·CVSS 5.0
CVE-2004-1617 [MEDIUM] CVE-2004-1617: Lynx, lynx-ssl, and lynx-cur before 2
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.
Debian
CVE-2004-1617: lynx - Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a...
vendor_debian·2004·CVSS 5.0
CVE-2004-1617 [MEDIUM] CVE-2004-1617: lynx - Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a...
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.
Scope: local
bookworm: resolved (fixed in 2.8.5-2sarge1.2)
bullseye: resolved (fixed in 2.8.5-2sarge1.2)
forky: resolved (fixed in 2.8.5-2sarge1.2)
sid: resolved (fixed in 2.8.5-2sarge1.2)
trixie: resolved (fixed in 2.8.5-2sarge1.2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lcamtuf.coredump.cx/mangleme/gallery/http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.htmlhttp://marc.info/?l=bugtraq&m=109811406620511&w=2http://secunia.com/advisories/20383http://securitytracker.com/id?1011809http://www.debian.org/security/2006/dsa-1076http://www.debian.org/security/2006/dsa-1077http://www.debian.org/security/2006/dsa-1085http://www.securityfocus.com/archive/1/435689/30/4740/threadedhttp://www.securityfocus.com/bid/11443https://exchange.xforce.ibmcloud.com/vulnerabilities/17804http://lcamtuf.coredump.cx/mangleme/gallery/http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.htmlhttp://marc.info/?l=bugtraq&m=109811406620511&w=2http://secunia.com/advisories/20383http://securitytracker.com/id?1011809http://www.debian.org/security/2006/dsa-1076http://www.debian.org/security/2006/dsa-1077http://www.debian.org/security/2006/dsa-1085http://www.securityfocus.com/archive/1/435689/30/4740/threadedhttp://www.securityfocus.com/bid/11443https://exchange.xforce.ibmcloud.com/vulnerabilities/17804
2004-10-18
Published