Lynx prior to 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
lynx project lynx 2.8.9 |