CVE-2016-9428
High
Description
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in the addMultirowsForm function in w3m allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML page.
SeverityHigh
CVSS8.8
Exploit probability—
ProductTats W3m
PublishedDec 12, 2016
First seenDec 12, 2016
Weakness typeCWE-120CWE-120
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tats w3m | v ≤ 0.5.3-30 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.