CVE-2006-7234

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-10-27 · updated 2026-06-16

Description

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

Affected products

Lynx: through 2.8.6; 2.8.1-dev.1, 2.8.1-dev.10, 2.8.1-dev.11, 2.8.1-dev.12, 2.8.1-dev.13, 2.8.1-dev.14 (+172)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/32407
http://secunia.com/advisories/32416
http://secunia.com/advisories/33568
http://www.mandriva.com/security/advisories?name=MDVSA-2008:217
http://www.openwall.com/lists/oss-security/2008/10/25/3
http://www.redhat.com/support/errata/RHSA-2008-0965.html
http://www.securityfocus.com/bid/31917
http://www.securitytracker.com/id?1021107
https://bugzilla.redhat.com/show_bug.cgi?id=214205
https://exchange.xforce.ibmcloud.com/vulnerabilities/46132

Get alerted when CVE-2006-7234 or the next vulnerability affects your stack