CVE-2016-9422

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feedtabletag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service stack and/or heap buffer overflow and possibly execute arbitrary code via a...

CVE-2016-9422

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feedtabletag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service stack and/or heap buffer overflow and possibly execute arbitrary code via a...

CVE-2016-9424

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service heap buffer overflow crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9425

CVE-2016-9425 concerns the w3m fork by Tatsuya Kinoshita prior to 0.5.3-31. it describes a heap-based buffer overflow in addMultirowsForm that can be triggered by a crafted HTML page, enabling a remote attacker to crash the process and potentially execute arbitrary code. The vulnerability is conf...

CVE-2016-9630

CVE-2016-9630 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, where a crafted HTML page can trigger a global buffer overflow and crash, enabling a denial-of-service risk. The issue is documented across multiple advisories as a vulnerability in w3m and has been addressed in several re...

CVE-2016-9625

CVE-2016-9625 affects the w3m fork by Tatsuya Kinoshita, before version 0.5.3-33, enabling a crafted HTML page to trigger infinite recursion and cause a denial of service. Public sources consistently tie this to w3m’s HTML rendering path; no exploit details are provided in the documents. Affected...

CVE-2016-9626

CVE-2016-9626 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, with an infinite recursion vulnerability that allows remote DoS via a crafted HTML page. Public references in connected documents confirm this issue and indicate that multiple distributions issued updates to fix related w3...

CVE-2016-9627

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service heap buffer overflow and crash via a crafted HTML page...

CVE-2016-9438

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9439

CVE-2016-9439 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31. Affected component: w3m HTML rendering parser. Root cause: infinite recursion vulnerability triggered by a crafted HTML page, enabling a remote attacker to cause a denial of service. Exposure: network vector; authentication n...

CVE-2016-9426

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service OOM and possibly execute arbitrary code due to bdwgc's bug CVE-2016-9427 via a crafted HTML page...

CVE-2016-9428

CVE-2016-9428 affects the Tatsuya Kinoshita w3m fork before 0.5.3-31. A heap-based buffer overflow in the addMultirowsForm function can be triggered by a crafted HTML page, leading to a denial of service (crash) and potentially arbitrary code execution. The relevant details are in the connected N...

CVE-2016-9430

CVE-2016-9430 affects the w3m text browser (Tatsuya Kinoshita fork) prior to 0.5.3-31. An attacker can supply a crafted HTML page to remotely trigger a segmentation fault, causing a denial of service. Public advisories indicate the issue was addressed by updating w3m to a newer git snapshot / fix...

CVE-2016-9433

CVE-2016-9433 affects the w3m web/text browser fork by Tatsuya Kinoshita prior to 0.5.3-31, enabling a remote attacker to trigger out-of-bounds HTML parsing and cause a denial of service. Connected advisories show upstream fixes via updated w3m snapshots (e.g., 0.5.3-30.git20170102 and newer) and...

CVE-2016-9430

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

PT-2016-7748 · W3M +2 · W3M +2

Name of the Vulnerable Software and Affected Versions: w3m versions prior to 0.5.3-31 Description: An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations: For versions prior to 0.5.3-31, update to...

PT-2016-7745 · W3M +2 · W3M +2

Name of the Vulnerable Software and Affected Versions: w3m versions prior to 0.5.3-31 Description: An issue in the renderTable function allows remote attackers to cause a denial of service and possibly execute arbitrary code due to an integer overflow vulnerability. This can be triggered via a...

CVE-2016-9629

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

CVE-2016-9627

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service heap buffer overflow and crash via a crafted HTML page...

CVE-2016-9422

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feedtabletag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service stack and/or heap buffer overflow and possibly execute arbitrary code via a...