CVE-2016-9429

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-31

Description An issue in the w3m fork allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted HTML page. This is due to a buffer overflow in the formUpdateBuffer function.

Recommendations For versions prior to 0.5.3-31, update to version 0.5.3-31 or later to resolve the issue. As a temporary workaround, consider restricting access to HTML pages from untrusted sources until the update is applied.