Out-of-Bounds Affecting w3m package, versions <0.5.3-5ubuntu1.2
Threat Intelligence
EPSS
2.41% (84th percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UBUNTU1204-W3M-395451
- published12 Dec 2016
- disclosed12 Dec 2016
Introduced: 12 Dec 2016
CVE-2016-9626 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade Ubuntu:12.04 w3m to version 0.5.3-5ubuntu1.2 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream w3m package and not the w3m package as distributed by Ubuntu.
See How to fix? for Ubuntu:12.04 relevant fixed versions and status.
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page.