CVE-2018-6196

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html
• tats/w3m commit 8354763 · Patch
• tats/w3m · Exploit
• lists.debian.org/debian-lts-announce/2020/04/msg00025.html
• usn.ubuntu.com/3555-1 · Third Party Advisory
• usn.ubuntu.com/3555-2 · Third Party Advisory

w3m のその他の脆弱性

• CVE-2023-4255中 5.5An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. …
• CVE-2023-38253中 5.5An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial o…
• CVE-2023-38252中 5.5An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of ser…
• CVE-2022-38223高 7.8There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m bi…
• CVE-2018-6198中 4.7w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a…