CVE Feed

    Dashboard / CVE / CVE-2016-9422

    CVE-2016-9422

    An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. The feed_table_tag function in w3m doesn't properly validate the value of table span, which allows remote attackers to cause a denial of service (stack and/or heap buffer overflow) and possibly execute arbitrary code via a crafted HTML page.

    Published:Aug 11, 2016
    Last Modified:Apr 12, 2025
    EPS:Dec 12, 2016
    EPSS Score:0.01043
    CVSS Score:8.8

    Affected Products

    Vendor
    Tats
    Product
    W3m

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-4255 (CVSS 5.5) — An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.…
    CVE-2023-38252 (CVSS 4.7) — An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an att…
    CVE-2023-38253 (CVSS 4.7) — An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow a…
    CVE-2022-38223 (CVSS 7.8) — There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a c…
    CVE-2018-6197 (CVSS 7.5) — w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.…
    CVE-2018-6198 (CVSS 4.7) — w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allo…
    CVE-2018-6196 (CVSS 7.5) — w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag fun…
    CVE-2016-9632 (CVSS 6.5) — An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to caus…
    CVE-2016-9631 (CVSS 6.5) — An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to caus…
    CVE-2016-9630 (CVSS 6.5) — An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to caus…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High