← Vulnerability feed

Vulnerability record · CVE-2006-7234 · published 27 October 2008

CVE-2006-7234: Lynx vulnerability

Lynx · Lynx

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

4.6 CVSS 2.0 Medium EPSS 0.88% · top 42.4%
4.6CVSS 2.0 base score
0.88%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
26References
16 Jun 2026Last modified by NVD

Description

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/32407
http://secunia.com/advisories/32416
http://secunia.com/advisories/33568
http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
http://www.openwall.com/lists/oss-security/2008/10/25/3
http://www.redhat.com/support/errata/RHSA-2008-0965.html
http://www.securityfocus.com/bid/31917
http://www.securitytracker.com/id?1021107
https://bugzilla.redhat.com/show_bug.cgi?id=214205
https://exchange.xforce.ibmcloud.com/vulnerabilities/46132
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/32407
http://secunia.com/advisories/32416
http://secunia.com/advisories/33568
http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
http://www.openwall.com/lists/oss-security/2008/10/25/3
http://www.redhat.com/support/errata/RHSA-2008-0965.html
http://www.securityfocus.com/bid/31917
http://www.securitytracker.com/id?1021107
https://bugzilla.redhat.com/show_bug.cgi?id=214205
https://exchange.xforce.ibmcloud.com/vulnerabilities/46132
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719

Track CVE-2006-7234 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-4690Lynx vulnerabilitylynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute arbitrary com…EPSS 5.1%7.5CVE-2016-9179Lynx improper input validation vulnerabilitylynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be t…EPSS 2.0%6.8CVE-2010-2810Lynx memory buffer overflow vulnerabilityHeap-based buffer overflow in the convert_to_idna function in WWW/Library/Implementation/HTParse.c in Lynx 2.8.8dev.1 through 2.8.8dev.4 allows remot…EPSS 3.7%5.9CVE-2012-5821Lynx improper certificate validation vulnerabilityLynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof …EPSS 0.81%

Source: NIST National Vulnerability Database (record CVE-2006-7234), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.