Remote Code Execution Vulnerability in w3m Web Browser
CVE-2016-9436

6.5MEDIUM

Key Information:

Vendor

Opensuse Project

Status
Leap
Vendor
CVE Published:
20 January 2017

What is CVE-2016-9436?

The vulnerability in the w3m web browser is due to improper initialization of values in the parsetagx.c file. This flaw enables remote attackers to exploit specially crafted HTML files, particularly affecting the handling of tags, leading to application crashes. It is crucial for users of w3m to update their software to the latest version to mitigate this risk.

References

https://security.gentoo.org/glsa/201701-08
vendor-advisoryx_refsource_GENTOO
https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6f...
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2016-12/msg000...
vendor-advisoryx_refsource_SUSE

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.