CVE-2016-9443 An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
MediumCVSS 6.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/w3m(Debian:12) | < 0.5.3-30 | 0.5.3-30 |
| debian/w3m(Debian:13) | < 0.5.3-30 | 0.5.3-30 |
| debian/w3m(Debian:14) | < 0.5.3-30 | 0.5.3-30 |
| tats w3m | <= 0.5.3-30 | No fix listed |
References
- Debian Security Tracker CVE-2016-9443 vendor-advisory
- [oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities mailing-list third-party-advisory
- 94407 vdb-entry
- github.com issue-tracking patch
- github.com issue-tracking patch
- GLSA-201701-08 vendor-advisory