CVE-2016-9434

The CVE-2016-9434 issue affects w3m (Tatsuya Kinoshita fork) prior to 0.5.3-31; a crafted HTML page could trigger a denial of service (segmentation fault/crash). Fedora/OpenSUSE/Gentoo/Nessus advisories document a security fix, upgrading to a newer upstream snapshot (git 20170102) to address this...

CVE-2016-9443

CVE-2016-9443 affects the w3m text-based browser (w3m fork by Tatsuya Kinoshita) prior to the 0.5.3-31 release. The vulnerability allows a remote attacker to cause a denial of service (segmentation fault/crash) by delivering a crafted HTML page. Connected advisories indicate upstream updates intr...

CVE-2016-9629

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9631

CVE-2016-9631 affects the w3m fork by Tatsuya Kinoshita (pre-0.5.3-33). An attacker can supply a crafted HTML page to remotely trigger a segmentation fault, causing a denial of service/crash. Public advisories (Fedora/SUSE/Mageia) document fixes: upstream update to a newer git snapshot (e.g., 0.5...

CVE-2016-9622

CVE-2016-9622 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-33. A crafted HTML page can trigger a denial of service (segmentation fault/crash) on remote attackers. Remediation: upgrade to 0.5.3-33 or newer; exploit details and in‑the‑wild status are not provided in the available documents.

CVE-2016-9437

CVE-2016-9437 affects the w3m project (Tatsuya Kinoshita’s w3m fork) prior to 0.5.3-31. The vulnerability allows a remote attacker to cause a segmentation fault and possible memory corruption by crafting a malicious HTML page, resulting in a denial of service. Several connected advisories confirm...

CVE-2016-9430

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9624

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9430

CVE-2016-9430 affects the w3m text browser (Tatsuya Kinoshita fork) prior to 0.5.3-31. An attacker can supply a crafted HTML page to remotely trigger a segmentation fault, causing a denial of service. Public advisories indicate the issue was addressed by updating w3m to a newer git snapshot / fix...

UBUNTU-CVE-2016-9629

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9629

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

UBUNTU-CVE-2016-9440

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9443

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9438

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9430

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9628

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9622

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9631

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

UBUNTU-CVE-2016-9441

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

shopify-scripts: Buffer overflow in mrb_time_asctime

Hi, This one doesn't always crash every time, but with ASAN on it will. Crash file is: Time.new-0XD00000000000000&0 But you could always do Time.atsec,usec with special values, and basically anything that gets tos called mrbtimeasctime in C in this case, no method found exception does this. Crash...