CVE-2010-2810

Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote…

published August 20, 2010

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed URL containing a % (percent) character in the domain name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03663 · 89.5th percentile
Published
2010-08-20T17:00Z
EPSS history
Timeline
  • 20 AUG 17:00Z
    Heap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remote…
    cvelistv5