Secunia

Red Hat has issued an update for elinks. This fixes a weakness and a vulnerability, which potentially can be exploited by malicious, local users to gain escalated privileges, and by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

1) A weakness is caused due to eLinks reading gettext catalogs from potentially untrusted paths.

For more information:
SA25169

2) An error within the "get_entity_string()" function in src/intl/charsets.c can be exploited to cause a static buffer overflow and e.g. cause a crash or potentially execute arbitrary code via a specially crafted HTML file.

Solution
Updated packages are available via Red Hat Network.
Further details available in Customer Area

Provided and/or discovered by
2) Reported by Jakub Wilk in a Debian bug report.

Original Advisory
RHSA-2009-1471:
https://rhn.redhat.com/errata/RHSA-2009-1471.html

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347
http://pasky.or.cz/gitweb.cgi?p=elinks.git;a=commit;h=341d54151f69d087112e1514b928e3fcc1810194

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area