Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-9428

Опубликовано: 19 авг. 2016
Источник: redhat
CVSS3: 4.3
CVSS2: 4.3
EPSS Низкий

Описание

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5w3mWill not fix
Red Hat Enterprise Linux 6w3mNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=1399667w3m: Out-of-bounds write in addMultirowsForm()

EPSS

Процентиль: 88%
0.03342
Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 9 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS3: 8.8
nvd
больше 9 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

CVSS3: 8.8
debian
больше 9 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3 ...

CVSS3: 8.8
github
больше 4 лет назад

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.

EPSS

Процентиль: 88%
0.03342
Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2