Every CVE Search/ Get API key

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP...

9.8 CriticalPublic exploitFix available

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

23.3%Down 4.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Record
CVE-2005-3120
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-131
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Record
CVE-2005-3120
Updated
2026-11-02
EUVDEUVD-2005-3120 No score

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Record
EUVD-2005-3120
Updated
2026-11-03
GitHub AdvisoriesGHSA-c6vg-33v6-g8vm No score

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP...

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Record
GHSA-c6vg-33v6-g8vm
Updated
2026-11-02
OSV 9.8

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Record
CVE-2005-3120
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2005-3120 9.8

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

Record
DEBIAN-CVE-2005-3120
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lynx
Debian:12
 before 2.8.5-2sarge1
2.8.5-2sarge1
lynx
Debian:13
 before 2.8.5-2sarge1
2.8.5-2sarge1
lynx
Debian:14
 before 2.8.5-2sarge1
2.8.5-2sarge1
lynx-cur
Debian:3.0
 before 2.8.5-2.5woody1, plus listed versions
2.8.5-2.5
2.8.5-2.5woody1
lynx-cur
Debian:3.1
 before 2.8.6-9sarge1, plus listed versions
2.8.6-9
2.8.6-9sarge1
lynx
Debian:3.0
 before 2.8.4.1b-3.3, plus listed versions
2.8.4.1b-3.2
2.8.4.1b-3.3
lynx
Debian:3.1
 before 2.8.5-2sarge1, plus listed versions
2.8.5-2
2.8.5-2sarge1
lynx
Debian:3.0
 before 2.8.4.1b-3.2
2.8.4.1b-3.2
lynx
Red Hat:enterprise_linux:3::as
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.8.5-11.1
0:2.8.5-11.1
Show 14 moreShow less
Affected packages
PackageAffectedFixed
lynx
Red Hat:enterprise_linux:3::desktop
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx
Red Hat:enterprise_linux:3::es
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx
Red Hat:enterprise_linux:3::ws
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.8.5-11.1
0:2.8.5-11.1
lynx
Red Hat:enterprise_linux:4::as
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx
Red Hat:enterprise_linux:4::desktop
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx
Red Hat:enterprise_linux:4::es
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx
Red Hat:enterprise_linux:4::ws
 before 0:2.8.5-18.1
0:2.8.5-18.1
lynx-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.8.5-18.1
0:2.8.5-18.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLynx 2.8.6dev.13 - Remote Buffer Overflow (PoC)2005-10-17

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-3120 is a critical vulnerability (CVSS 9.8) in Invisible-island Lynx, published October 17, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 23.3%, the 97th percentile. Fixed in lynx 2.8.5-2sarge1.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open