CVE-2016-9441

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9622

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9624

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9628

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9428

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9432

CVE-2016-9432 affects the Tatsuya Kinoshita w3m fork, prior to 0.5.3-31, where a crafted HTML page can trigger memory corruption, leading to a segmentation fault and potential crash (remote DoS). This is the concrete vulnerability described in the connected Nessus entries, which state the issue a...

CVE-2016-9438

The CVE-2016-9438 entry concerns the w3m fork by Tatsuya Kinoshita (pre-0.5.3-31), where a crafted HTML page can cause a denial of service via segmentation fault/crash. Multiple vendor advisories (Fedora updates citing a new upstream git snapshot 20170102 and package fixes for w3m-0.5.3-30.git201...

CVE-2016-9439

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

CVE-2016-9441

CVE-2016-9441 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-31, allowing remote attackers to cause a denial of service (segmentation fault/crash) via a crafted HTML page. Connected sources confirm the issue and indicate some distributions shipped updates (e.g., Fedora/Mageia advisories...

CVE-2016-9441

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9429

CVE-2016-9429 affects the w3m text-based browser (Tatsuya Kinoshita fork) prior to version 0.5.3-31. It describes a buffer/length check flaw in formUpdateBuffer that can lead to an out-of-bounds write, enabling remote crash or possible arbitrary code execution through a crafted HTML page. Public ...

CVE-2016-9434

The CVE-2016-9434 issue affects w3m (Tatsuya Kinoshita fork) prior to 0.5.3-31; a crafted HTML page could trigger a denial of service (segmentation fault/crash). Fedora/OpenSUSE/Gentoo/Nessus advisories document a security fix, upgrading to a newer upstream snapshot (git 20170102) to address this...

CVE-2016-9433

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service out-of-bounds array access via a crafted HTML page...

CVE-2016-9443

CVE-2016-9443 affects the w3m text-based browser (w3m fork by Tatsuya Kinoshita) prior to the 0.5.3-31 release. The vulnerability allows a remote attacker to cause a denial of service (segmentation fault/crash) by delivering a crafted HTML page. Connected advisories indicate upstream updates intr...

CVE-2016-9424

CVE-2016-9424 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31. The issue is that w3m does not properly validate the value of a tag attribute, enabling a remote attacker to trigger a denial of service (heap buffer overflow) and potentially execute arbitrary code via a crafted HTML page. C...

CVE-2016-9437

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash and possibly memory corruption via a crafted HTML page...

CVE-2016-9630

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service global buffer overflow and crash via a crafted HTML page...

CVE-2016-9632

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service global buffer overflow and crash via a crafted HTML page...

CVE-2016-9633

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service infinite loop and resource consumption via a crafted HTML page...

CVE-2016-9631

CVE-2016-9631 affects the w3m fork by Tatsuya Kinoshita (pre-0.5.3-33). An attacker can supply a crafted HTML page to remotely trigger a segmentation fault, causing a denial of service/crash. Public advisories (Fedora/SUSE/Mageia) document fixes: upstream update to a newer git snapshot (e.g., 0.5...