CVE-2016-9425 — Improper Restriction of Operations within the Bounds of a Memory Buffer in W3M

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787 — Out-of-bounds Write8 documents8 sources

Severity

8.8HIGHNVD

EPSS

1.6%

top 18.30%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Tats W3M

Timeline

PublishedDec 12

Latest updateMay 17

Description

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶Debiantats/w3m< 0.5.3-30+3

▶NVDtats/w3m0.5.3-30

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

GHSA

GHSA-pphr-vx2j-3836: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0↗2022-05-17

▶

CVEList

CVE-2016-9425: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0↗2016-12-12

▶

OSV

CVE-2016-9425: An issue was discovered in the Tatsuya Kinoshita w3m fork before 0↗2016-12-12

▶

📋Vendor Advisories

Ubuntu

w3m vulnerabilities↗2017-03-02

▶

Red Hat

w3m: Segmentation fault due to write to lineBuf[-1] in addMultirowsForm↗2016-08-19

▶

Debian

CVE-2016-9425: w3m - An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-...↗2016

▶

💬Community

Bugzilla

CVE-2016-9425 w3m: Segmentation fault due to write to lineBuf[-1] in addMultirowsForm↗2016-11-29

▶