w3m: Multiple vulnerabilities
Multiple vulnerabilities have been found in w3m, the worst of which
could lead to the execution of arbitrary code.
w3m
January 01, 2017
January 01, 2017: 1
579312
600176
remote
0.5.3-r9
0.5.3-r9
w3m is a text based WWW browser.
Multiple vulnerabilities have been discovered in w3m. Please review the
CVE identifiers referenced below for details.
A remote attacker could execute arbitrary code with the privileges of
the process or cause a Denial of Service condition via a maliciously
crafted HTML file.
There is no known workaround at this time.
All w3m users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/w3m-0.5.3-r9"
CVE-2016-9422
CVE-2016-9423
CVE-2016-9424
CVE-2016-9425
CVE-2016-9426
CVE-2016-9428
CVE-2016-9429
CVE-2016-9430
CVE-2016-9431
CVE-2016-9432
CVE-2016-9433
CVE-2016-9434
CVE-2016-9435
CVE-2016-9436
CVE-2016-9437
CVE-2016-9438
CVE-2016-9439
CVE-2016-9440
CVE-2016-9441
CVE-2016-9442
CVE-2016-9443
b-man
b-man