CVE-2018-6198

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html
• securityfocus.com/bid/102855 · Third Party Advisory
• bugs.debian.org/888097 · Issue Tracking
• tats/w3m commit 18dcbad · Patch
• salsa.debian.org/debian/w3m/commit/18dcbadf2771cdb0c18509b14e4e73505b242753 · Patch
• usn.ubuntu.com/3555-1 · Third Party Advisory
• usn.ubuntu.com/3555-2 · Third Party Advisory

w3m のその他の脆弱性

• CVE-2023-4255中 5.5An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. …
• CVE-2023-38253中 5.5An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial o…
• CVE-2023-38252中 5.5An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of ser…
• CVE-2022-38223高 7.8There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m bi…
• CVE-2018-6197高 7.5w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.