CVE-2023-38252

W3m: out of bounds read in strnew_size() at w3m/str.c

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Redhat Tats

Products

Extra Packages For Enterprise Linux Fedora Enterprise Linux and 2 more

CVE-2022-38223

w3m: an out-of-bounds write in checkType located in etc.c in w3m

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Tats

Products

Fedora W3m

CVE-2016-9436

w3m: Unitialised value in parsetagx.c

parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed

Vendors

Opensuse Opensuse Project Tats

Products

Leap Leap W3m

CVE-2016-9435

w3m: Unitialised value in file.c

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed

Vendors

Opensuse Opensuse Project Tats

Products

Leap Leap W3m

CVE-2016-9426

w3m: Heap corruption due to integer overflow in renderTable()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code due to bdwgc's bug (CVE-2016-9427) via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9428

w3m: Out-of-bounds write in addMultirowsForm()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9429

w3m: Global-buffer-overflow write in formUpdateBuffer

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9430

w3m: Segmentation fault with malformed input tag

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9431

w3m: Stack overflow in deleteFrameSet()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9432

w3m: Segmentation fault due to bcopy with negative size

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (memory corruption, segmentation fault, and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9433

w3m: Segmentation fault when parsing iso2022 characters

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (out-of-bounds array access) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9434

w3m: Null pointer dereference due to incorrect form_int fid

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9437

w3m: Write access violation with '<button type=radio>'

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) and possibly memory corruption via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9438

w3m: Null pointer dereference with input_alt tag

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9439

w3m: Infinite recursion with nested table and textarea

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9440

w3m: Null pointer dereference in formUpdateBuffer

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9441

w3m: Null pointer dereference in do_refill

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9442

w3m: Potential heap-buffer corruption due to Strgrow

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9443

w3m: Null pointer dereference in formUpdateBuffer

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9622

w3m: Null pointer dereference in HTMLlineproc2body

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m