CVE-2002-1348: Medium severity w3m w3m vulnerability
Published Feb 19, 2003
·Updated
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.
Affected Software
12 affected components
w3m w3m=0.2
w3m w3m=0.2.1
w3m w3m=0.2.2
w3m w3m=0.2.3
w3m w3m=0.2.4
w3m w3m=0.2.5
w3m w3m=0.2.5.1
w3m w3m=0.3
w3m w3m=0.3.1
w3m w3m=0.3.2
w3m w3m=0.3.2.1
w3m w3m=0.3.2.2
Remediation
Patch Available
Patch Available
Event History
Feb 19, 2003
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1348?
CVE-2002-1348 is considered a high-severity vulnerability due to its potential to allow unauthorized access to files and cookies.
2
How do I fix CVE-2002-1348?
To fix CVE-2002-1348, upgrade to w3m version 0.3.2.2 or later, which addresses this vulnerability.
3
What versions of w3m are affected by CVE-2002-1348?
CVE-2002-1348 affects all versions of w3m prior to 0.3.2.2.
4
What impact does CVE-2002-1348 have on users?
The impact of CVE-2002-1348 allows remote attackers to exploit improperly escaped HTML tags, potentially compromising user data.
5
Who is vulnerable to CVE-2002-1348?
Users running w3m versions 0.2.x through 0.3.2.1 are vulnerable to CVE-2002-1348.