CVE-2017-1000211

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Nov 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-10002129.8Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute rCVE-2017-10002134.8WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_searchCVE-2017-10002149.8GitPHP by xiphux is vulnerable to OS Command InjectionsCVE-2017-10002159.8ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code executionCVE-2017-10002178.8Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting inCVE-2017-10002189.8LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execCVE-2017-10002199.8npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js userCVE-2017-10002209.8soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command executionCVE-2017-10002216.5In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will haCVE-2017-10002235.4A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated CVE-2017-10002246.5CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the pluginCVE-2017-10002256.1Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anyt