CVE-2016-9435

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application…

published January 20, 2017

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03340 · 88.5th percentile
Published
2017-01-20T15:00Z
EPSS history
Timeline
  • 20 JAN 15:00Z
    The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application…
    cvelistv5