CVE-2016-9435

Description

References

• lists.opensuse.org/opensuse-updates/2016-12/msg00084.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/11/18/3 · Mailing List
• securityfocus.com/bid/94407 · Third Party Advisory
• tats/w3m commit 33509cc · Issue Tracking
• tats/w3m · Issue Tracking
• security.gentoo.org/glsa/201701-08 · Third Party Advisory

More vulnerabilities in w3m

• CVE-2023-4255MEDIUM 5.5An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. …
• CVE-2023-38253MEDIUM 5.5An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial o…
• CVE-2023-38252MEDIUM 5.5An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of ser…
• CVE-2022-38223HIGH 7.8There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m bi…
• CVE-2018-6198MEDIUM 4.7w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a…