CVE-2016-9428
Fixed in a distro release EPSS 3%CVSS 8.8
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
Products: tats w3m
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | w3m | 0.5.3.git20161031-1 |
| Debian 12 | w3m | 0.5.3-30 |
| Debian 13 | w3m | 0.5.3-30 |
| Debian 14 | w3m | 0.5.3-30 |
| Ubuntu 14.04 LTS | w3m | 0.5.3-15ubuntu0.1 |
| Ubuntu 16.04 LTS | w3m | 0.5.3-26ubuntu0.1 |