(#A vulnerability was reported in Lynx browser.#A remote attacker could exploit it by enticing their victim into following a specially crafted link in order to redirect them on an arbitrary web site.##This vulnerability stems from an improper parsing of the URL when the host name part ends with ???.##A proof of concept is available.##The lynx-cur packages provided by Debian Wheezy 7 and Jessie 8 are vulnerable.#Updated, 09/01/2017:#The lynx packages provided by FreeBSD are vulnerable.)
