CVE-2022-38223

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...

w3m 缓冲区错误漏洞

w3m is a WWW-enabled pager from the personal developer Tatsuya Kinoshita. A security vulnerability exists in w3m version 0.5.3, which stems from an out-of-bounds write to checkType in etc.c. This can be triggered by sending a crafted HTML file to the w3m binary, allowing attackers to cause a deni...

CVE-2022-38223

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...

CVE-2022-38223

There is an out-of-bounds write in checkType() in etc.c of w3m 0.5.3. A crafted HTML file can trigger this via the w3m binary, leading to Denial of Service and potentially other impacts. Connected advisories from Fedora and TencentOS Linux indicate upstream patches to fix this issue have been rel...

Mageia: Security Advisory (MGASA-2016-0154)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0024)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0312)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:3046-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:3053-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0776-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2195-1 : w3m security update

Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support. One issue is related to a stack overflow, the other one is a fix for a NULL pointer dereference. Brief introduction CVE-2018-6196 Description CVE-2018-6197 Description For Debian 8 'Jessie', these problem...

Debian: Security Advisory (DLA-2195-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2195-1] w3m security update

Package : w3m Version : 0.5.3-19+deb8u3 CVE ID : CVE-2018-6196 CVE-2018-6197 Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support. One issue is related to a stack overflow, the other one is a fix for a null pointer dereference. Brief introduction CVE-2018-61...

DLA-2195-1 w3m - security update

Bulletin has no description...

Spoofing Attack

w3m is vulnerable to spoofing attack. It was discovered that w3m is affected by the previously published "null prefix attack", caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted certificate signed by a trusted Certificate...

openSUSE Security Update : w3m (openSUSE-2019-1142)

This update for w3m fixes the following issues : Security issues fixed : - CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feedtableblocktag function which did not prevent a negative indent value bsc1077559 - CVE-2018-6197: Prevent NULL pointer dereference in...

openSUSE: Security Advisory for w3m (openSUSE-SU-2019:1142-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for w3m (moderate)

openSUSE Security Update: Security update for w3m Announcement ID: openSUSE-SU-2019:1142-1 Rating: moderate References: 1077559 1077568 1077572 Cross-References: CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

SUSE SLED12 / SLES12 Security Update : w3m (SUSE-SU-2019:0776-1)

This update for w3m fixes several issues. These security issues were fixed : CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feedtableblocktag function which did not prevent a negative indent value bsc1077559 CVE-2018-6197: Prevent NULL pointer dereference in...

SUSE-SU-2019:0776-1 Security update for w3m

This update for w3m fixes several issues. These security issues were fixed: - CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feedtableblocktag function which did not prevent a negative indent value bsc1077559 - CVE-2018-6197: Prevent NULL pointer dereference in...