parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://security.gentoo.org/glsa/201701-08 | vdb entry third party advisory vendor advisory |
https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd | issue tracking patch technical description |
http://lists.opensuse.org/opensuse-updates/2016-12/msg00084.html | third party advisory vendor advisory |
https://github.com/tats/w3m/issues/16 | issue tracking third party advisory patch |
http://www.securityfocus.com/bid/94407 | vdb entry third party advisory |
http://www.openwall.com/lists/oss-security/2016/11/18/3 | mailing list third party advisory patch |