CVE-2018-6198

CVE-2018-6198 affects w3m up to 0.5.3; when ~/.w3m is unwritable, a local attacker can craft a symlink attack to overwrite arbitrary files. Patches/fixes exist across distributions (e.g., openSUSE/SUSE updates and related advisories) addressing CVE-2018-6196–6198; apply vendor updates to mitigate.

CVE-2018-6196

CVE-2018-6196 affects w3m up to version 0.5.3. The underlying issue is an infinite recursion in HTMLlineproc0 caused by feed_table_block_tag not preventing a negative indent value in table.c. Public advisories and patches across distros confirm the fix in multiple releases: OpenSUSE/SUSE update (...

CVE-2018-6197

CVE-2018-6197 affects w3m

CVE-2022-38223

There is an out-of-bounds write in checkType() in etc.c of w3m 0.5.3. A crafted HTML file can trigger this via the w3m binary, leading to Denial of Service and potentially other impacts. Connected advisories from Fedora and TencentOS Linux indicate upstream patches to fix this issue have been rel...

CVE-2023-38253

CVE-2023-38253 is a vulnerability in w3m (growbuf_to_Str in indep.c) causing an out-of-bounds read that can lead to a denial of service when processing crafted HTML. Connected advisories confirm this issue alongside related CVEs and indicate that patches/upgrades for w3m are available in multiple...

CVE-2023-38252

CVE-2023-38252 : Affected software is the w3m pager/browser. The vulnerability is an out-of-bounds read in the Strnew_size function of Str.c, which can allow a crafted HTML file to trigger a denial of service. Multiple connected advisories confirm the issue and reference related CVEs (38253, 4255...

CVE-2023-4255

CVE-2023-4255 describes an out-of-bounds write in W3M’s etc.c backspace handling (checkType()) that can be triggered by a crafted HTML file to cause a crash/DoS. Affected software is W3M (e.g., w3m 0.5.3); multiple disclosures reference this flaw across Astra Linux, Debian, and related advisories...

CVE-2016-9437

CVE-2016-9437 affects the w3m project (Tatsuya Kinoshita’s w3m fork) prior to 0.5.3-31. The vulnerability allows a remote attacker to cause a segmentation fault and possible memory corruption by crafting a malicious HTML page, resulting in a denial of service. Several connected advisories confirm...

CVE-2016-9432

CVE-2016-9432 affects the Tatsuya Kinoshita w3m fork, prior to 0.5.3-31, where a crafted HTML page can trigger memory corruption, leading to a segmentation fault and potential crash (remote DoS). This is the concrete vulnerability described in the connected Nessus entries, which state the issue a...

CVE-2016-9442

Summary (CVE-2016-9442): The issue in the Tatsuya Kinoshita w3m fork (before 0.5.3-31) allows a crafted HTML page to trigger memory corruption. This affects w3m’s rendering path and could impact stability or cause corruption. Impact: memory corruption as described; no exploit details or likelihoo...

CVE-2016-9435

CVE-2016-9435 affects the w3m HTML renderer. The HTMLtagproc1 function in file.c does not properly initialize values in w3m before 0.5.3+git20161009, allowing remote attackers to crash the application via a crafted HTML file (notably involving tags). The vulnerability could cause a denial of ser...

CVE-2016-9625

CVE-2016-9625 affects the w3m fork by Tatsuya Kinoshita, before version 0.5.3-33, enabling a crafted HTML page to trigger infinite recursion and cause a denial of service. Public sources consistently tie this to w3m’s HTML rendering path; no exploit details are provided in the documents. Affected...

CVE-2016-9439

CVE-2016-9439 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31. Affected component: w3m HTML rendering parser. Root cause: infinite recursion vulnerability triggered by a crafted HTML page, enabling a remote attacker to cause a denial of service. Exposure: network vector; authentication n...

CVE-2016-9624

CVE-2016-9624 stems from the Tatsuya Kinoshita w3m fork prior to version 0.5.3-33, where a crafted HTML page can trigger a denial-of-service through segmentation fault/crash. The connected Nessus/OpenVAS entries corroborate that this vulnerability exists in w3m builds before that patch level and ...

CVE-2016-9443

CVE-2016-9443 affects the w3m text-based browser (w3m fork by Tatsuya Kinoshita) prior to the 0.5.3-31 release. The vulnerability allows a remote attacker to cause a denial of service (segmentation fault/crash) by delivering a crafted HTML page. Connected advisories indicate upstream updates intr...

CVE-2016-9436

CVE-2016-9436 affects the w3m HTML rendering component, specifically parsetagx.c, where an improper initialization of values in versions before 0.5.3+git20161009 can lead to a crash when parsing a crafted HTML file (related to a tag). The vulnerability is triggered remotely via crafted input, ca...

CVE-2016-9441

CVE-2016-9441 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-31, allowing remote attackers to cause a denial of service (segmentation fault/crash) via a crafted HTML page. Connected sources confirm the issue and indicate some distributions shipped updates (e.g., Fedora/Mageia advisories...

CVE-2016-9622

CVE-2016-9622 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-33. A crafted HTML page can trigger a denial of service (segmentation fault/crash) on remote attackers. Remediation: upgrade to 0.5.3-33 or newer; exploit details and in‑the‑wild status are not provided in the available documents.

CVE-2016-9623

CVE-2016-9623 affects the Tatsuya Kinoshita w3m fork prior to version 0.5.3-33; a crafted HTML page can remotely trigger a denial of service (segmentation fault/crash). Related connected sources confirm unpatched exposure and vendor patches have been released (e.g., Mageia update MGASA-2018-0024;...

CVE-2016-9424

CVE-2016-9424 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31. The issue is that w3m does not properly validate the value of a tag attribute, enabling a remote attacker to trigger a denial of service (heap buffer overflow) and potentially execute arbitrary code via a crafted HTML page. C...

CVE-2016-9426

CVE-2016-9426 affects the Tatsuya Kinoshita w3m fork prior to 0.5.3-31, with an integer overflow in w3m’s renderTable, leading to potential OOM and possibly arbitrary code execution via a bug in bdwgc (CVE-2016-9427). Connected documents corroborate the issue and reference related fixes: Debian L...

CVE-2016-9632

CVE-2016-9632 affects the w3m pager/browser (Tatsuya Kinoshita fork) prior to version 0.5.3-33. An attacker can craft an HTML page that triggers a global buffer overflow, leading to a denial-of-service (crash). The OpenVAS/Fedora/Mageia entries confirm w3m as the affected component and reference ...

CVE-2016-9627

CVE-2016-9627 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, where a crafted HTML page can trigger a heap buffer overflow leading to a crash (DoS). The vulnerability is addressed by updated w3m packages (e.g., Mageia/Fedora advisories note fixes; the unreleased details in the initia...

CVE-2016-9633

CVE-2016-9633 affects the w3m fork by Tatsuya Kinoshita prior to version 0.5.3-33, where a crafted HTML page can trigger a denial-of-service via infinite loop and resource exhaustion. The vulnerability is documented in multiple advisories and open-source repos, with upstream fixes implemented in ...

CVE-2016-9626

CVE-2016-9626 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, with an infinite recursion vulnerability that allows remote DoS via a crafted HTML page. Public references in connected documents confirm this issue and indicate that multiple distributions issued updates to fix related w3...

CVE-2016-9425

CVE-2016-9425 concerns the w3m fork by Tatsuya Kinoshita prior to 0.5.3-31. it describes a heap-based buffer overflow in addMultirowsForm that can be triggered by a crafted HTML page, enabling a remote attacker to crash the process and potentially execute arbitrary code. The vulnerability is conf...

CVE-2016-9434

The CVE-2016-9434 issue affects w3m (Tatsuya Kinoshita fork) prior to 0.5.3-31; a crafted HTML page could trigger a denial of service (segmentation fault/crash). Fedora/OpenSUSE/Gentoo/Nessus advisories document a security fix, upgrading to a newer upstream snapshot (git 20170102) to address this...

CVE-2016-9429

CVE-2016-9429 affects the w3m text-based browser (Tatsuya Kinoshita fork) prior to version 0.5.3-31. It describes a buffer/length check flaw in formUpdateBuffer that can lead to an out-of-bounds write, enabling remote crash or possible arbitrary code execution through a crafted HTML page. Public ...

CVE-2016-9440

CVE-2016-9440 affects the w3m fork by Tatsuya Kinoshita prior to version 0.5.3-31. A crafted HTML page allows remote attackers to trigger a denial of service (segmentation fault/crash). Connected sources confirm the issue resides in w3m’s HTML rendering with an exploit via crafted input, leading ...

CVE-2016-9430

CVE-2016-9430 affects the w3m text browser (Tatsuya Kinoshita fork) prior to 0.5.3-31. An attacker can supply a crafted HTML page to remotely trigger a segmentation fault, causing a denial of service. Public advisories indicate the issue was addressed by updating w3m to a newer git snapshot / fix...

CVE-2016-9431

CVE-2016-9431 affects the Tatsuya Kinoshita w3m fork. The vulnerability is an infinite recursion in w3m when processing a crafted HTML page, enabling a denial of service. The issue is fixed in the upstream w3m updates (the advisories reference a newer git snapshot / package fixes to remedy this c...

CVE-2016-9629

CVE-2016-9629 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, where a crafted HTML page could cause a remote denial of service via segmentation fault/crash. Connected advisories indicate fixes in updated w3m packages (e.g., Mageia MGASA-2018-0024) and Fedora/SUSE/OpenVAS entries refe...

CVE-2016-9631

CVE-2016-9631 affects the w3m fork by Tatsuya Kinoshita (pre-0.5.3-33). An attacker can supply a crafted HTML page to remotely trigger a segmentation fault, causing a denial of service/crash. Public advisories (Fedora/SUSE/Mageia) document fixes: upstream update to a newer git snapshot (e.g., 0.5...

CVE-2016-9428

CVE-2016-9428 affects the Tatsuya Kinoshita w3m fork before 0.5.3-31. A heap-based buffer overflow in the addMultirowsForm function can be triggered by a crafted HTML page, leading to a denial of service (crash) and potentially arbitrary code execution. The relevant details are in the connected N...

CVE-2016-9423

CVE-2016-9423 affects the Tatsuya Kinoshita w3m fork prior to version 0.5.3-31, where a heap-based buffer overflow in w3m’s HTML handling can enable a remote attacker to crash the process or possibly execute code. Public advisories (Mageia, Gentoo, Fedora, Ubuntu, Gentoo GLSA, Alpine) indicate fi...

CVE-2016-9422

CVE-2016-9422 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-31. The vulnerability is in the feed_table_tag function, which fails to properly validate the value of table span, enabling a remote attacker to cause a denial of service (stack and/or heap buffer overflow) and potentially exe...

CVE-2016-9438

The CVE-2016-9438 entry concerns the w3m fork by Tatsuya Kinoshita (pre-0.5.3-31), where a crafted HTML page can cause a denial of service via segmentation fault/crash. Multiple vendor advisories (Fedora updates citing a new upstream git snapshot 20170102 and package fixes for w3m-0.5.3-30.git201...

CVE-2016-9630

CVE-2016-9630 affects the w3m fork by Tatsuya Kinoshita prior to 0.5.3-33, where a crafted HTML page can trigger a global buffer overflow and crash, enabling a denial-of-service risk. The issue is documented across multiple advisories as a vulnerability in w3m and has been addressed in several re...

CVE-2016-9433

CVE-2016-9433 affects the w3m web/text browser fork by Tatsuya Kinoshita prior to 0.5.3-31, enabling a remote attacker to trigger out-of-bounds HTML parsing and cause a denial of service. Connected advisories show upstream fixes via updated w3m snapshots (e.g., 0.5.3-30.git20170102 and newer) and...

CVE-2016-9628

CVE-2016-9628 affects the w3m browser/pager from the Tatsuya Kinoshita fork (prior to version 0.5.3-33). A crafted HTML page can trigger a denial of service via a segmentation fault/crash. Connected advisories show this was addressed in distro updates (e.g., Mageia MGASA-2018-0024; Fedora securit...