CVE-2016-9623

w3m: Integer overflow resulting in segmentation fault

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9624

w3m: Null pointer dereference in formUpdateBuffer

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9625

w3m: HTMLlineproc0 infinite recursion

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9626

w3m: Infinite recursion in HTMLlineproc0

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9627

w3m: Array index out of bounds in display.c

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (heap buffer overflow and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9628

w3m: Null pointer dereference due to bad form id in HTMLlineproc2body()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9629

w3m: Null pointer dereference in shiftAnchorPosition()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9630

w3m: Buffer-overflow in parseURL()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9631

w3m: Null pointer dereference in HTMLlineproc0()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9632

w3m: Buffer-overflow in wc_any_to_ucs()

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (global buffer overflow and crash) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9633

w3m: Memory exhaustion due to repeatedly appending '<table>'

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service (infinite loop and resource consumption) via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9422

w3m: Stack smashed with large image inside table

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9423

w3m: Malformed html tag heap-buffer overflow

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9424

w3m: Out-of-bounds heap write due to negative array index

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service (heap buffer overflow crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2016-9425

w3m: Segmentation fault due to write to lineBuf[-1] in addMultirowsForm

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 3.3% KEV · Not listed

Vendors

Tats

Products

W3m

CVE-2023-4255

W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Tats

Products

Extra Packages For Enterprise Linux Fedora W3m

CVE-2023-38253

W3m: out of bounds read in growbuf_to_str() at w3m/indep.c

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Redhat Tats

Products

Extra Packages For Enterprise Linux Fedora Enterprise Linux and 1 more

CVE-2018-6198

w3m: insecure temporary files creation when ~/.w3m is unwritable

w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Tats

Products

Ubuntu Linux W3m

CVE-2018-6197

w3m: Null pointer dereference in formUpdateBuffer in form.c

w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.

CVSS 3.0 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Canonical Tats

Products

Ubuntu Linux W3m

CVE-2018-6196

w3m: Infinite recursion in HTMLlineproc0

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed

Vendors

Canonical Tats

Products

Ubuntu Linux W3m