PT-2016-7741 · Tatsuya Kinoshita+3 · W3M+3

Kcwu · Published 2016-12-07 · Updated 2023-12-29 · CVE-2016-9422

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-31

Description An issue was discovered in the Tatsuya Kinoshita w3m fork. The feed table tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.

Recommendations For versions prior to 0.5.3-31, update to version 0.5.3-31 or later to resolve the issue. As a temporary workaround, consider restricting the use of the feed table tag function until a patch is available. Avoid using the table span value in crafted HTML pages to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2020-3081

ALT-PU-2020-3099

CVE-2016-9422

MGASA-2018-0024

SUSE-SU-2016:3046-1

USN-3214-1

Affected Products

Alt Linux

Suse

Ubuntu

W3M

References · 112

• https://github.com/tats/w3m/issues/8 · Patch
• https://github.com/tats/w3m/blob/master/ChangeLog · Patch
• https://ubuntu.com/security/CVE-2016-9628 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9433 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-9422 · Security Note
• https://ubuntu.com/security/CVE-2016-9443 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9428 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9424 · Vendor Advisory
• https://security.gentoo.org/glsa/201701-08 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9440 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-9422 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9625 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0024.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-9422 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3214-1 · Vendor Advisory