CVE-2016-9423
HighSummary
An issue was discovered in the w3m fork before version 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
Risk Assessment
This vulnerability may lead to service crashes and allow attackers to execute arbitrary code remotely, posing a serious security threat to the organization.
Recommendation
It is recommended to update w3m to version 0.5.3-31 or later to mitigate this vulnerability.
Other vulnerabilities in w3m
See all- CVE-2016-9429High
An issue was discovered in w3m before version 0.5.3-31 related to a buffer overflow in the formUpdateBuffer function. Remote attackers can cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
- CVE-2016-9428High
An issue was discovered in w3m before version 0.5.3-31 related to a heap-based buffer overflow in the addMultirowsForm function. This allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
- CVE-2016-9426High
An issue was discovered in the Tatsuya Kinoshita w3m fork before version 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code via a crafted HTML page.
- CVE-2016-9425High
An issue was discovered in the w3m fork before version 0.5.3-31, involving a heap-based buffer overflow in the addMultirowsForm function. This allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
- CVE-2016-9424High
An issue was discovered in w3m before version 0.5.3-31 related to improper validation of tag attribute values, which can lead to heap buffer overflow and program crashes. Remote attackers may exploit this vulnerability to potentially execute arbitrary code via a crafted HTML page.
- CVE-2016-9422High
An issue was discovered in w3m before version 0.5.3-31 related to the feed_table_tag function, which does not properly validate the table span value. This allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.
- CVE-2023-38253Medium
An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
- CVE-2023-38252Medium
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.
Original NVD description (English source)
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.