Lynx 2.8.x (including the latest development version) overflow.
30 Oct. 1998
Summary
Lynx 2.8.x is susceptible buffer overflows causing the execution of the stack, making it possible for a malicious user to create web pages that will cause Lynx (while browsing those web sites) to execute an arbitrary code.
Lynx seems to be unable to handle a buffer of approximately 1454 bytes long, when it reads the following HTML tags:
<a href="rlogin://(approx. 1454 times 'A')">...</a>,
<a href="telnet://(approx. 1454 times 'A')">...</a>,
<a href="tn3270://(approx. 1454 times 'A')">...</a>.
It seems that finger://, cso://, nttp:// and news:// are also affected by this bug.
