Related Vulnerabilities: CVE-2016-9431  

A stack overflow vulnerability has been discovered in deleteFrameSet() on specially crafted input like a malformed HTML tag.

Severity Critical

Remote Yes

Type Arbitrary code execution

Description

A stack overflow vulnerability has been discovered in deleteFrameSet() on specially crafted input like a malformed HTML tag.

AVG-73 w3m 0.5.3.git20160413-1 0.5.3.git20161031-1 Critical Fixed

18 Nov 2016 ASA-201611-18 AVG-73 w3m Critical multiple issues

https://github.com/tats/w3m/issues/10