CVEvulnerability

CVE-2006-7234

4.6 MEDIUM Published 2008-10-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

Affected configurations

• lynx lynx (<= 2.8.6) • lynx lynx 2.8.1 • lynx lynx 2.8.2 • lynx lynx 2.8.3 • lynx lynx 2.8.4 • lynx lynx 2.8.5 • lynx lynx 2.8.6

References