This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-9435 →

DEBIAN-CVE-2016-9435

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the ap...

Original description

The description as published by the source.

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to tags.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 w3m

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-30"}]}]

Debian:13 w3m

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-30"}]}]

Debian:14 w3m

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.3-30"}]}]

References

advisory security-tracker.debian.org