An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
27 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Jan 2024, 02:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/tats/w3m/commit/edc602651c506aeeb60544b55534dd1722a340d3 - Patch | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2255207 - Issue Tracking, Third Party Advisory | |
| References | () https://github.com/tats/w3m/pull/273 - Issue Tracking, Patch | |
| References | () https://github.com/tats/w3m/issues/268 - Exploit, Issue Tracking, Patch | |
| CPE | cpe:2.3:a:tats:w3m:0.5.3\+git20230129:*:*:*:*:*:*:* cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:a:tats:w3m:0.5.3\+git20230121-1:*:*:*:*:*:*:* cpe:2.3:a:tats:w3m:0.5.3\+git20230121-2:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* |
|
| CWE | CWE-787 | |
| First Time |
Tats w3m
Fedoraproject fedora Fedoraproject Tats Fedoraproject extra Packages For Enterprise Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
21 Dec 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-21 16:15
Updated : 2024-03-27 03:15
NVD link : CVE-2023-4255
Mitre link : CVE-2023-4255
CVE.ORG link : CVE-2023-4255
JSON object : View
Products Affected
tats
- w3m
fedoraproject
- fedora
- extra_packages_for_enterprise_linux
CWE
CWE-787
Out-of-bounds Write