This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-9426 →

DEBIAN-CVE-2016-9426

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows re...

Original description

The description as published by the source.

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow vulnerability in the renderTable function in w3m allows remote attackers to cause a denial of service (OOM) and possibly execute arbitrary code due to bdwgc's bug (CVE-2016-9427) via a crafted HTML page.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 w3m

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-30"}]}]

Debian:13 w3m

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-30"}]}]

Debian:14 w3m

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-30"}]}]

References

advisory security-tracker.debian.org