NetSight
IP …
medium5.5

CVE-2023-4255

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application.

Impact

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.

Affected products

VendorProductAffected versions
TatsW3m
Versions 0.5.3\+git20230121-1, 0.5.3\+git20230121-2, 0.5.3\+git20230129
FedoraprojectExtra Packages For Enterprise Linux
Version 8.0
FedoraprojectFedora
Version 39

Weakness classification

CWE-787

References