CVE-2006-6772

2006-12-2700:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.127 Low

EPSS

Percentile

95.5%

JSON

Format string vulnerability in the inputAnswer function in file.c in w3m
before 0.5.2, when run with the dump or backend option, allows remote
attackers to execute arbitrary code via format string specifiers in the
Common Name (CN) field of an SSL certificate associated with an https URL.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchw3m< 0.5.1-4ubuntu2.6.06UNKNOWN
ubuntu6.10noarchw3m< 0.5.1-4ubuntu2.6.10UNKNOWN
ubuntu7.04noarchw3m< 0.5.1-5.1ubuntu1UNKNOWN