1
PublicDateAtUSN: 2016-12-11
2
Candidate: CVE-2016-9442
5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9442
6
https://github.com/tats/w3m/commit/d43527cfa0dbb3ccefec4a6f7b32c1434739aa29
7
http://www.openwall.com/lists/oss-security/2016/11/18/3
8
https://usn.ubuntu.com/usn/usn-3214-1
10
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31.
11
w3m allows remote attackers to cause memory corruption in certain
12
conditions via a crafted HTML page.
17
Discovered-by: Kuang-che Wu
21
debian: https://github.com/tats/w3m/commit/d43527cfa0dbb3ccefec4a6f7b32c1434739aa29
22
upstream_w3m: released (0.5.3-30)
23
precise_w3m: released (0.5.3-5ubuntu1.2)
24
precise/esm_w3m: released (0.5.3-5ubuntu1.2)
25
trusty_w3m: released (0.5.3-15ubuntu0.1)
26
vivid/stable-phone-overlay_w3m: DNE
27
vivid/ubuntu-core_w3m: DNE
28
xenial_w3m: released (0.5.3-26ubuntu0.1)
29
yakkety_w3m: ignored (reached end-of-life)
30
zesty_w3m: not-affected (0.5.3-32)
31
devel_w3m: not-affected (0.5.3-32)