CVE-2016-9422
Fixed in a distro release EPSS 3%
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.
Products: tats w3m
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | w3m | 0.5.3.git20161031-1 |
| Debian 12 | w3m | 0.5.3-30 |
| Debian 13 | w3m | 0.5.3-30 |
| Debian 14 | w3m | 0.5.3-30 |
| SUSE Linux Enterprise Server 11 SP4 | w3m | 0.5.3.git20161120-4.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | w3m | 0.5.3.git20161120-4.1 |
| Ubuntu 14.04 LTS | w3m | 0.5.3-15ubuntu0.1 |
| Ubuntu 16.04 LTS | w3m | 0.5.3-26ubuntu0.1 |