Описание
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | released | 0.5.3+git20230121-2ubuntu1 |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra-legacy/trusty | released | 0.5.3-15ubuntu0.2+esm2 |
| esm-infra/bionic | released | 0.5.3-36ubuntu0.1+esm1 |
| esm-infra/focal | released | 0.5.3-37ubuntu0.2 |
| focal | released | 0.5.3-37ubuntu0.2 |
| jammy | released | 0.5.3+git20210102-6ubuntu0.2 |
| lunar | released | 0.5.3+git20230121-2ubuntu0.23.04.1 |
Показывать по
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
An out-of-bounds write issue has been discovered in the backspace hand ...
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
ALT-PU-2015-2043: package `w3m` update to version 0.5.3-alt1
EPSS
5.5 Medium
CVSS3