Summary
It was discovered that w3m incorrectly handled certain inputs.
An attacker could possibly use this to cause a denial of service.
(CVE-2018-6196, CVE-2018-6197)
It was discovered that w3m incorrectly handled temporary files.
An attacker could possibly use this to overwrite arbitrary files.
(CVE-2018-6198)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | w3m | 0.5.3-15ubuntu0.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | w3m | 0.5.3-26ubuntu0.2 |
Vulnerabilities 3
-
Unscored —
w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in …
-
Unscored —
w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
-
Unscored —
w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a loca…