Remote Yes

Type Arbitrary code execution

Description

A heap buffer overflow vulnerability has been discovered in addMultirowsForm() duo to an invalid array access resulting in a write to lineBuf[-1].

AVG-73 w3m 0.5.3.git20160413-1 0.5.3.git20161031-1 Critical Fixed

18 Nov 2016 ASA-201611-18 AVG-73 w3m Critical multiple issues

https://github.com/tats/w3m/issues/21