CVE-2006-6772

w3m - Remote Code Execution via Format String in SSL Certificate Common Name

Title source: llm

Description

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.

References (22)

Core 22

Core References

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/5164

Product x_refsource_confirm

http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250

Product x_refsource_confirm

http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log

Mailing List vendor-advisory x_refsource_fedora

http://fedoranews.org/cms/node/2415

Mailing List mailing-list x_refsource_fulldisc

http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html

Vendor Advisory vendor-advisory x_refsource_openpkg

http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/31114

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23717

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200701-06.xml

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23492

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23792

Product x_refsource_confirm

http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1017440

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34821

Product x_refsource_misc

http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2007_05_w3m.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/21735

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/24332

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-399-1

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23773

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23588

Mailing List vendor-advisory x_refsource_fedora

http://fedoranews.org/cms/node/2416

Scores

EPSS 0.0466

EPSS Percentile 90.6%

Details

CWE

CWE-134

Status published

Products (1)

w3m/w3m 0.5.1

Published Dec 27, 2006

Tracked Since Feb 18, 2026