W3M SSL Certificate Format String Vulnerability
BID:21735
Info
W3M SSL Certificate Format String Vulnerability
| Bugtraq ID: | 21735 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-6772 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 25 2006 12:00AM |
| Updated: | Mar 19 2015 09:40AM |
| Credit: | Discovery is credited to an anonymous researcher. |
| Vulnerable: |
W3M W3M 0.5.1 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SP3 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise Desktop 10 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard Server 8.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SuSE Linux Openexchange Server 4.0 S.u.S.E. openSUSE 10.2 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Desktop 1.0 S.u.S.E. Linux 9.3 x86-64 S.u.S.E. Linux 9.3 x86 S.u.S.E. Linux 10.1 x86-64 S.u.S.E. Linux 10.1 x86 S.u.S.E. Linux 10.1 ppc S.u.S.E. Linux 10.0 x86-64 S.u.S.E. Linux 10.0 x86 S.u.S.E. Linux 10.0 ppc Red Hat Fedora Core6 Red Hat Fedora Core5 OpenPKG OpenPKG 2.5 OpenPKG OpenPKG 2.4 OpenPKG OpenPKG 2.3 OpenPKG OpenPKG 2.2 OpenPKG OpenPKG 2.1 OpenPKG OpenPKG 2.0 OpenPKG OpenPKG Stable OpenPKG OpenPKG E1.0-Solid OpenPKG OpenPKG Current OpenPKG OpenPKG 2-Stable-20061018 Gentoo Linux |
| Not Vulnerable: | |
Discussion
W3M SSL Certificate Format String Vulnerability
W3M is prone to a format-string vulnerability. This issue can occur when the browser processes SSL certificates that include format specifiers.
A successful exploit could result in the execution of arbitrary code in the context of the user running the browser.
The vulnerability was reported to affect version 0.5.1; prior versions could also be affected.
W3M is prone to a format-string vulnerability. This issue can occur when the browser processes SSL certificates that include format specifiers.
A successful exploit could result in the execution of arbitrary code in the context of the user running the browser.
The vulnerability was reported to affect version 0.5.1; prior versions could also be affected.
Exploit / POC
W3M SSL Certificate Format String Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
References
W3M SSL Certificate Format String Vulnerability
References:
References: