CVE-2016-9441 - Vulnerability Details - OpenCVE

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Tats	W3m

Configuration 1 [-]

cpe:2.3:a:tats:w3m:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2016/11/18/3
http://www.securityfocus.com/bid/94407
https://github.com/tats/w3m/blob/master/ChangeLog
https://github.com/tats/w3m/issues/24
https://nvd.nist.gov/vuln/detail/CVE-2016-9441
https://security.gentoo.org/glsa/201701-08
https://www.cve.org/CVERecord?id=CVE-2016-9441

History

Tue, 15 Oct 2024 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-12-12T02:00:00

Updated: 2024-10-15T17:15:24.979Z

Reserved: 2016-11-18T00:00:00

Link: CVE-2016-9441

Vulnrichment

Updated: 2024-08-06T02:50:38.437Z

NVD

Status : Deferred

Published: 2016-12-12T02:59:33.157

Modified: 2025-04-12T10:46:40.837

Link: CVE-2016-9441

Redhat

Severity : Low

Publid Date: 2016-08-20T00:00:00Z

Links: CVE-2016-9441 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-11-03T00:00:00", "descriptions": [{"lang": "en", "value": "An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-06-30T16:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "GLSA-201701-08", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201701-08"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/tats/w3m/issues/24"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/tats/w3m/blob/master/ChangeLog"}, {"name": "94407", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94407"}, {"name": "[oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/3"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-9441", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "GLSA-201701-08", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201701-08"}, {"name": "https://github.com/tats/w3m/issues/24", "refsource": "CONFIRM", "url": "https://github.com/tats/w3m/issues/24"}, {"name": "https://github.com/tats/w3m/blob/master/ChangeLog", "refsource": "CONFIRM", "url": "https://github.com/tats/w3m/blob/master/ChangeLog"}, {"name": "94407", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94407"}, {"name": "[oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/11/18/3"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:50:38.437Z"}, "title": "CVE Program Container", "references": [{"name": "GLSA-201701-08", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201701-08"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/tats/w3m/issues/24"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/tats/w3m/blob/master/ChangeLog"}, {"name": "94407", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/94407"}, {"name": "[oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/3"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-15T17:09:47.036048Z", "id": "CVE-2016-9441", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-15T17:15:24.979Z"}}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-9441", "datePublished": "2016-12-12T02:00:00", "dateReserved": "2016-11-18T00:00:00", "dateUpdated": "2024-10-15T17:15:24.979Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.gentoo.org/glsa/201701-08", "name": "GLSA-201701-08", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"]}, {"url": "https://github.com/tats/w3m/issues/24", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/tats/w3m/blob/master/ChangeLog", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "http://www.securityfocus.com/bid/94407", "name": "94407", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2016/11/18/3", "name": "[oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:50:38.437Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2016-9441", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-15T17:09:47.036048Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-15T17:11:19.092Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-11-03T00:00:00", "references": [{"url": "https://security.gentoo.org/glsa/201701-08", "name": "GLSA-201701-08", "tags": ["vendor-advisory", "x_refsource_GENTOO"]}, {"url": "https://github.com/tats/w3m/issues/24", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/tats/w3m/blob/master/ChangeLog", "tags": ["x_refsource_CONFIRM"]}, {"url": "http://www.securityfocus.com/bid/94407", "name": "94407", "tags": ["vdb-entry", "x_refsource_BID"]}, {"url": "http://www.openwall.com/lists/oss-security/2016/11/18/3", "name": "[oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_MLIST"]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2017-06-30T16:57:01"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "n/a"}]}, "product_name": "n/a"}]}, "vendor_name": "n/a"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "https://security.gentoo.org/glsa/201701-08", "name": "GLSA-201701-08", "refsource": "GENTOO"}, {"url": "https://github.com/tats/w3m/issues/24", "name": "https://github.com/tats/w3m/issues/24", "refsource": "CONFIRM"}, {"url": "https://github.com/tats/w3m/blob/master/ChangeLog", "name": "https://github.com/tats/w3m/blob/master/ChangeLog", "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/94407", "name": "94407", "refsource": "BID"}, {"url": "http://www.openwall.com/lists/oss-security/2016/11/18/3", "name": "[oss-security] 20161118 Re: CVE request: w3m - multiple vulnerabilities", "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2016-9441", "STATE": "PUBLIC", "ASSIGNER": "cve@mitre.org"}}}}, "cveMetadata": {"cveId": "CVE-2016-9441", "state": "PUBLISHED", "dateUpdated": "2024-10-15T17:15:24.979Z", "dateReserved": "2016-11-18T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2016-12-12T02:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tats:w3m:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0F4C28A-807A-41FD-98B2-94041822220C", "versionEndIncluding": "0.5.3-30", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted HTML page."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en el fork de Tatsuya Kinoshita w3m en versiones anteriores a 0.5.3-31. w3m permite a atacantes remotos provocar una denegaci\u00f3n de servicio (error de segmentaci\u00f3n y ca\u00edda) a trav\u00e9s de una p\u00e1gina HTML manipulada."}], "id": "CVE-2016-9441", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-12-12T02:59:33.157", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/3"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/94407"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/tats/w3m/blob/master/ChangeLog"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/tats/w3m/issues/24"}, {"source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/201701-08"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2016/11/18/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/94407"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/tats/w3m/blob/master/ChangeLog"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/tats/w3m/issues/24"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201701-08"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}