CVE-2010-2074

The CVE-2010-2074 issue affects istream.c in w3m 0.5.2 (and potentially other versions) where, when ssl_verify_server is enabled, a NULL character ('\0') in a certificate’s domain name (CN or SAN) can allow MITM spoofing of SSL servers via a certificate issued by a trusted CA. This is a domain-na...

CVE-2002-1348

CVE-2002-1348 affects w3m prior to 0.3.2.2, where HTML escaping in IMG ALT attributes is insufficient, potentially allowing remote attackers to access local files or cookies. Connected advisories (Debian DSA for w3m/w3mmee) confirm multiple Debian advisories addressing this vulnerability and indi...

CVE-2006-6772

CVE-2006-6772 is a format-string vulnerability in w3m’s inputAnswer function (file.c) that affects modes -dump/-backend; an attacker could craft a certificate CN in an HTTPS URL to execute arbitrary code. The issue is fixed in later w3m builds (e.g., w3m-0.5.3+git20180125-1.14 and related openSUS...

CVE-2002-1335

CVE-2002-1335 affects w3m 0.3.2, where an HTML tag inside a frame is not escaped, enabling cross-site scripting. The vulnerability allows a remote attacker to run arbitrary scripts or access files and cookies by injecting HTML/script in the frame content. Documented impact is limited to partial i...

CVE-2001-0700

CVE-2001-0700 affects w3m up to version 0.2.1, where a buffer overflow in MIME header parsing may allow a remote attacker to execute arbitrary code via a long base64-encoded MIME header. Debian advisories DSA-064-1 and DSA-081-1 address this by updating w3m and w3m-ssl; OpenVAS/NASL entries descr...