CVE-2016-9436

parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.

References

Affected packages

Git / github.com/tats/w3m

Affected ranges

Type: GIT
Repo: https://github.com/tats/w3m
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd

Affected versions

upstream/0.*

upstream/0.1.10+0.1.11pre+kokb23

upstream/0.3

upstream/0.5.1

upstream/0.5.2

upstream/0.5.3

v0.*

v0.5.3+debian-19

v0.5.3+git20150203

v0.5.3+git20150509

v0.5.3+git20150623

v0.5.3+git20150720

v0.5.3+git20150811

v0.5.3+git20151010

v0.5.3+git20151119

v0.5.3+git20160228

v0.5.3+git20160511

v0.5.3+git20160718

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2016-9436-2fda5057",
            "signature_type": "Line",
            "target": {
                "file": "file.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "311004745453435617756753801353359150057",
                    "143134225384708127344576683335910472673",
                    "186384755597943013168483540501107179659",
                    "112398006071132182438373256047756762888"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd"
        },
        {
            "id": "CVE-2016-9436-79107265",
            "signature_type": "Line",
            "target": {
                "file": "parsetagx.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "104395104491150999346745860766298117160",
                    "22387227991403213856454022304549452974",
                    "309193199931375910465849400156799792841"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd"
        },
        {
            "id": "CVE-2016-9436-986b439c",
            "signature_type": "Function",
            "target": {
                "file": "file.c",
                "function": "HTMLtagproc1"
            },
            "signature_version": "v1",
            "digest": {
                "length": 25115.0,
                "function_hash": "4987390351755194380299389707932098436"
            },
            "deprecated": false,
            "source": "https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd"
        },
        {
            "id": "CVE-2016-9436-e6ec55a9",
            "signature_type": "Function",
            "target": {
                "file": "parsetagx.c",
                "function": "parse_tag"
            },
            "signature_version": "v1",
            "digest": {
                "length": 3604.0,
                "function_hash": "78877202036832609142144252743261376164"
            },
            "deprecated": false,
            "source": "https://github.com/tats/w3m/commit/33509cc81ec5f2ba44eb6fd98bd5c1b5873e46bd"
        }
    ]
}