[oss-security] CVE request:Lynx invalid URL parsing with '?'

Posted by redrain root on Nov 04

I can’t find any bugtracker in lynx ,so i will disclose by this mail and
sent to the author dickey () invisible-island net.

redrain (rootredrain () gmail com)
Date:2016-11-03
Version: 2.8.8pre.4、2.8.9dev.8 and earlier
Platform: Linux and Windows
Vendor: http://lynx.browser.org/
Vendor Notified: 2016-11-03

VULNERABILITY
————————-

Lynx doesn’t parse the authority component of the URL correctly when the
host
name part…

Leave a Reply