Skip to content
OpenAdvisories
High USN-3214-1 33 CVEs

w3m vulnerabilities

Published Mar 2, 2017 · Updated Feb 10, 2026

Summary

A large number of security issues were discovered in the w3m browser. If a
user were tricked into viewing a malicious website, a remote attacker could
exploit a variety of issues related to web browser security, including
cross-site scripting attacks, denial of service attacks, and arbitrary code
execution.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS w3m 0.5.3-15ubuntu0.1

Vulnerabilities 33

  • High 8.8

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultiro…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't p…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows rem…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of t…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultiro…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the render…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer func…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allo…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows r…

  • Unscored —

    parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion vulnerability in w3m allo…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause memory …

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allo…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allo…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

  • Unscored —

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denia…

References

  • report
    https://ubuntu.com/security/CVE-2016-9422
  • report
    https://ubuntu.com/security/CVE-2016-9423
  • report
    https://ubuntu.com/security/CVE-2016-9424
  • report
    https://ubuntu.com/security/CVE-2016-9425
  • report
    https://ubuntu.com/security/CVE-2016-9426
  • report
    https://ubuntu.com/security/CVE-2016-9428
  • report
    https://ubuntu.com/security/CVE-2016-9429
  • report
    https://ubuntu.com/security/CVE-2016-9430
  • report
    https://ubuntu.com/security/CVE-2016-9431
  • report
    https://ubuntu.com/security/CVE-2016-9432
  • report
    https://ubuntu.com/security/CVE-2016-9433
  • report
    https://ubuntu.com/security/CVE-2016-9434
  • report
    https://ubuntu.com/security/CVE-2016-9435
  • report
    https://ubuntu.com/security/CVE-2016-9436
  • report
    https://ubuntu.com/security/CVE-2016-9437
  • report
    https://ubuntu.com/security/CVE-2016-9438
  • report
    https://ubuntu.com/security/CVE-2016-9439
  • report
    https://ubuntu.com/security/CVE-2016-9440
  • report
    https://ubuntu.com/security/CVE-2016-9441
  • report
    https://ubuntu.com/security/CVE-2016-9442
  • report
    https://ubuntu.com/security/CVE-2016-9443
  • report
    https://ubuntu.com/security/CVE-2016-9622
  • report
    https://ubuntu.com/security/CVE-2016-9623
  • report
    https://ubuntu.com/security/CVE-2016-9624
  • report
    https://ubuntu.com/security/CVE-2016-9625
  • report
    https://ubuntu.com/security/CVE-2016-9626
  • report
    https://ubuntu.com/security/CVE-2016-9627
  • report
    https://ubuntu.com/security/CVE-2016-9628
  • report
    https://ubuntu.com/security/CVE-2016-9629
  • report
    https://ubuntu.com/security/CVE-2016-9630
  • report
    https://ubuntu.com/security/CVE-2016-9631
  • report
    https://ubuntu.com/security/CVE-2016-9632
  • report
    https://ubuntu.com/security/CVE-2016-9633