Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9425

Опубликовано: 19 авг. 2016
Источник: redhat
CVSS3: 4.3
CVSS2: 4.3

Описание

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5w3mWill not fix
Red Hat Enterprise Linux 6w3mWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=1399666w3m: Segmentation fault due to write to lineBuf[-1] in addMultirowsForm

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS3: 8.8
nvd
около 9 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS3: 8.8
debian
около 9 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3 ...

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

suse-cvrf
около 9 лет назад

Security update for w3m

4.3 Medium

CVSS3

4.3 Medium

CVSS2