Ubuntu Security Notice USN-206-1 – Ulf Harnhammar discovered a remote vulnerability in Lynx when connecting to a news server (NNTP). The function that added missing escape chararacters to article headers did not check the size of the target buffer. Specially crafted news entries could trigger a buffer overflow, which could be exploited to execute arbitrary code with the privileges of the user running lynx. In order to exploit this, the user is not even required to actively visit a news site with Lynx since a malicious HTML page could automatically redirect to an nntp:// URL with malicious news items.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40776/usn-206-1.txt
Source: https://packetstormsecurity.com/files/40776/usn-206-1.txt.html