Remote Yes

Type Arbitrary code execution

Description

A vulnerability has been discovered in formUpdateBuffer() duo to insufficient bounds validation leading to a negative sized bcopy() call getting converted to an unexpectedly large value.

AVG-73 w3m 0.5.3.git20160413-1 0.5.3.git20161031-1 Critical Fixed

18 Nov 2016 ASA-201611-18 AVG-73 w3m Critical multiple issues

https://github.com/tats/w3m/issues/13
http://www.openwall.com/lists/oss-security/2016/11/18/3