CVE-2010-2810

Published Aug 20, 2010

Last updated 7 years ago

Overview

Description: Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed URL containing a % (percent) character in the domain name.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:lynx:lynx:2.8.8:dev.1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "42FB67C0-FDC8-47D4-9F16-D2AF58702154"
          },
          {
            "criteria": "cpe:2.3:a:lynx:lynx:2.8.8:dev.2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1D960C6-14BE-40F9-A1D7-AAA8BACBF110"
          },
          {
            "criteria": "cpe:2.3:a:lynx:lynx:2.8.8:dev.3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50A549F2-0202-4FFE-9EF3-2B1334DB32F1"
          },
          {
            "criteria": "cpe:2.3:a:lynx:lynx:2.8.8:dev.4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1042CE97-1042-4BED-9A42-18379A309780"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References