750 matches found
CVE-2016-9442
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory corruption in certain conditions via a crafted HTML page...
CVE-2016-9628
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
CVE-2016-9431
CVE-2016-9431 affects the Tatsuya Kinoshita w3m fork. The vulnerability is an infinite recursion in w3m when processing a crafted HTML page, enabling a denial of service. The issue is fixed in the upstream w3m updates (the advisories reference a newer git snapshot / package fixes to remedy this c...
CVE-2016-9428
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...
CVE-2016-9437
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash and possibly memory corruption via a crafted HTML page...
CVE-2016-9623
CVE-2016-9623 affects the Tatsuya Kinoshita w3m fork prior to version 0.5.3-33; a crafted HTML page can remotely trigger a denial of service (segmentation fault/crash). Related connected sources confirm unpatched exposure and vendor patches have been released (e.g., Mageia update MGASA-2018-0024;...
CVE-2016-9629
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
CVE-2016-9629
CVE-2016-9629 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, where a crafted HTML page could cause a remote denial of service via segmentation fault/crash. Connected advisories indicate fixes in updated w3m packages (e.g., Mageia MGASA-2018-0024) and Fedora/SUSE/OpenVAS entries refe...
CVE-2016-9429
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...
CVE-2016-9423
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...
CVE-2016-9443
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
CVE-2016-9628
CVE-2016-9628 affects the w3m browser/pager from the Tatsuya Kinoshita fork (prior to version 0.5.3-33). A crafted HTML page can trigger a denial of service via a segmentation fault/crash. Connected advisories show this was addressed in distro updates (e.g., Mageia MGASA-2018-0024; Fedora securit...
CVE-2016-9426
CVE-2016-9426 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31, with an integer overflow in w3m’s renderTable, leading to potential OOM and possibly arbitrary code execution via a bug in bdwgc (CVE-2016-9427). Connected documents corroborate the issue and reference related fixes: Debian L...
CVE-2016-9428
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...
CVE-2016-9426
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service OOM and possibly execute arbitrary code due to bdwgc's bug CVE-2016-9427 via a crafted HTML page...
CVE-2016-9434
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...
CVE-2016-9439
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...
CVE-2016-9441
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...