Published: 20/09/2001 Updated: 10/10/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in w3m 0.2.1 and previous versions allows a remote malicious user to execute arbitrary code via a long base64 encoded MIME header.

Vulnerable Product	Search on Vulmon	Subscribe to Product
w3m w3m 0.1.8
w3m w3m 0.1.9
w3m w3m 0.1.10
w3m w3m 0.2
w3m w3m
w3m w3m 0.1.3
w3m w3m 0.1.4
w3m w3m 0.1.6
w3m w3m 0.1.7

SecureNet Service reported that w3m (a console web browser) has a buffer overflow in its MIME header parsing code This could be exploited by an attacker if by making a web-server a user visits return carefully crafted MIME headers This has been fixed in version 0110+0111pre+kokb23-4, and we recommend that you upgrade your w3m package ...

In SNS Advisory No 32 a buffer overflow vulnerability has been reported in the routine which parses MIME headers that are returned from web servers A malicious web server administrator could exploit this and let the client web browser execute arbitrary code w3m handles MIME headers included in the request/response message of HTTP communication l ...

source: wwwsecurityfocuscom/bid/2895/info W3M is a pager/text-based WWW browser similiar to lynx A buffer overflow vulnerability exists in the 'w3m' client program The overflow occurs when a base64-encoded string exceeding approximately 32 characters in length is received in a MIME header field As a result, it may be possible for a ma ...

NVD-CWE-Other http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200106.month/537.html http://www.securityfocus.com/bid/2895 http://www.securityfocus.com/archive/1/192371 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000434 http://www.debian.org/security/2001/dsa-064 http://www.debian.org/security/2001/dsa-081 https://exchange.xforce.ibmcloud.com/vulnerabilities/6725 https://nvd.nist.gov https://www.debian.org/security/./dsa-064 https://www.exploit-db.com/exploits/20941/

CVE-2001-0700

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect