Description
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a w3m
Default version status: affected
Fedora Fedora
Default version status: affected
Fedora Extra Packages for Enterprise Linux
Default version status: affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2255207 ↗
- https://github.com/tats/w3m/commit/edc602651c506aeeb60544b55534dd1722a340d3 ↗
- https://github.com/tats/w3m/issues/268 ↗
- https://github.com/tats/w3m/pull/273 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/ ↗