CVE-2016-9436

parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html…

published January 20, 2017

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03340 · 88.5th percentile
Published
2017-01-20T15:00Z
EPSS history
Timeline
  • 20 JAN 15:00Z
    parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html…
    cvelistv5