CVE-2016-9422: Buffer Overflow
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feedtabletag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9422?
CVE-2016-9422 has been classified as a high severity vulnerability due to its potential for denial of service and remote code execution.
How do I fix CVE-2016-9422?
To fix CVE-2016-9422, upgrade to w3m version 0.5.3-31 or later, which contains the necessary patches.
Who is affected by CVE-2016-9422?
CVE-2016-9422 affects users of the w3m fork by Tatsuya Kinoshita before version 0.5.3-31.
What type of attack is possible due to CVE-2016-9422?
An attacker can exploit CVE-2016-9422 to cause a denial of service or potentially execute arbitrary code.
What functions are involved in CVE-2016-9422?
The vulnerability in CVE-2016-9422 specifically involves the feed_table_tag function in w3m.