CVE-2006-7234

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Lynx 2.8 - '.mailcap'/'.mime.type' Local Code Execution2008-11-03 · remote · linux · Verified

Impact

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

Affected products

References

• NVD record
• CVE.org record
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
• http://secunia.com/advisories/32407
• http://secunia.com/advisories/32416
• http://secunia.com/advisories/33568
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
• http://www.openwall.com/lists/oss-security/2008/10/25/3
• http://www.redhat.com/support/errata/RHSA-2008-0965.html
• http://www.securityfocus.com/bid/31917
• http://www.securitytracker.com/id?1021107
• https://bugzilla.redhat.com/show_bug.cgi?id=214205
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46132
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
• http://secunia.com/advisories/32407
• http://secunia.com/advisories/32416
• http://secunia.com/advisories/33568
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
• http://www.openwall.com/lists/oss-security/2008/10/25/3
• http://www.redhat.com/support/errata/RHSA-2008-0965.html
• http://www.securityfocus.com/bid/31917
• http://www.securitytracker.com/id?1021107
• https://bugzilla.redhat.com/show_bug.cgi?id=214205
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46132