CVE-2005-3120

Name	CVE-2005-3120
Description	Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1085-1, DSA-874-1, DSA-876-1
Debian Bugs	334423, 335033

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
lynx (PTS)	bullseye (security), bullseye	2.9.0dev.6-3~deb11u1	fixed
	bookworm	2.9.0dev.12-1	fixed
	sid, trixie	2.9.2-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
lynx	source	woody	2.8.4.1b-3.3		DSA-874-1
lynx	source	sarge	2.8.5-2sarge1		DSA-876-1
lynx	source	(unstable)	2.8.5-2sarge1	high		335033
lynx-cur	source	woody	2.8.5-2.5woody1		DSA-1085-1
lynx-cur	source	sarge	2.8.6-9sarge1		DSA-1085-1
lynx-cur	source	(unstable)	2.8.6-16	high		334423
lynx-ssl	source	(unstable)	(unfixed)