Buffer overflow in w3m

54

Author: JT Smith

uLinuxSecurity.com: “w3m, a text file/Web browser which is similar to lynx, has
a buffer overflow vulnerability in a routine to parse MIME header.
If a user retrieves/downloads a malformed Web page with w3m,
a malicious Web server administrator may gain an escalated
privilege from the w3m user, which is run by w3m remotely.”

Category:

  • Linux