CVE-2016-9426
Fixed in a distro release EPSS 3%
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code due to bdwgc's bug (CVE-2016-9427) via a crafted HTML page.
Products: tats w3m
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | w3m | 0.5.3.git20161031-1 |
| Debian 12 | w3m | 0.5.3-30 |
| Debian 13 | w3m | 0.5.3-30 |
| Debian 14 | w3m | 0.5.3-30 |
| Ubuntu 14.04 LTS | w3m | 0.5.3-15ubuntu0.1 |
| Ubuntu 16.04 LTS | w3m | 0.5.3-26ubuntu0.1 |