LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

w3m: denial of service

Package(s):w3m CVE #(s):
Created:December 28, 2006 Updated:January 15, 2007
Description: The W3M textual web browser has a format string vulnerability. If the run-time options -dump or -backend are used, W3M can be made to crash if certain escape sequences occur in the Common Name of a web site X.509 certificate.
Alerts:
Fedora FEDORA-2007-077 2007-01-15
Fedora FEDORA-2007-078 2007-01-15
Gentoo 200701-06 2007-01-12
SuSE SUSE-SA:2007:005 2007-01-10
Ubuntu USN-399-1 2007-01-03
OpenPKG OpenPKG-SA-2006.044 2006-12-28
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds