Lucene search

K
cvelistRedhatCVELIST:CVE-2023-4255
HistoryDec 21, 2023 - 4:08 p.m.

CVE-2023-4255 W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)

2023-12-2116:08:39
CWE-787
redhat
raw.githubusercontent.com
3
vulnerability
out-of-bounds write
w3m
denial of service

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%