W3M Image Attribute Cross Site Scripting Vulnerability

Bugtraq ID:	6794
Class:	Input Validation Error
CVE:	CVE-2002-1348
Remote:	Yes
Local:	No
Published:	Feb 07 2003 12:00AM
Updated:	Jul 11 2009 08:06PM
Credit:	This vulnerability was reported by Hironori SAKAMOTO <[email protected]>.
Vulnerable:	W3M w3mmee-ssl 0.3 .p23.3 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 W3M w3mmee 0.3 .p23.3 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 W3M W3M 0.3.2 .2 W3M W3M 0.3.2 .1 W3M W3M 0.3.2 W3M W3M 0.3.1 + Redhat Linux 8.0 i386 + Redhat Linux 8.0 W3M W3M 0.3 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 W3M W3M 0.2.5 .1 W3M W3M 0.2.5 W3M W3M 0.2.4 W3M W3M 0.2.3 W3M W3M 0.2.2 W3M W3M 0.2.1 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 W3M W3M 0.2 + Redhat Linux 7.0 i386 + Redhat Linux 7.0
Not Vulnerable:

W3M Image Attribute Cross Site Scripting Vulnerability

A cross site scripting vulnerability has been reported for W3M. Due to inadequate sanitization of IMAGE tags, it is possible for an attacker to steal another user's cookie information or other sensitive data.

W3M Image Attribute Cross Site Scripting Vulnerability

There is no exploit code required.

W3M Image Attribute Cross Site Scripting Vulnerability

Solution:
It is recommended that all Gentoo Linux users who are running
net-www/w3m upgrade to w3m-0.3.2.2 as follows:

emerge sync
emerge -u w3m
emerge clean

OpenPKG has released a security advisory (OpenPKG-SA-2003.009) which contains information on how to obtain fixes via ftp. OpenPKG users are advised to upgrade their w3m packages as soon as possible.

Fixes available:


W3M W3M 0.2

• RedHat w3m-0.3.1-4.7.1.1.i386.rpm
  ftp://updates.redhat.com/7.0/ja/os/i386/w3m-0.3.1-4.7.1.1.i386.rpm

W3M W3M 0.2.1

• RedHat w3m-0.3.1-4.7.2.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/w3m-0.3.1-4.7.2.i386.rpm


• RedHat w3m-0.3.1-4.7.2.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/w3m-0.3.1-4.7.2.ia64.rpm

W3M w3mmee 0.3 .p23.3

• Debian w3mmee-img_0.3.p23.3-1.5_alpha.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_alpha.deb


• Debian w3mmee-img_0.3.p23.3-1.5_arm.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_arm.deb


• Debian w3mmee-img_0.3.p23.3-1.5_hppa.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_hppa.deb


• Debian w3mmee-img_0.3.p23.3-1.5_i386.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_i386.deb


• Debian w3mmee-img_0.3.p23.3-1.5_ia64.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_ia64.deb


• Debian w3mmee-img_0.3.p23.3-1.5_m68k.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_m68k.deb


• Debian w3mmee-img_0.3.p23.3-1.5_mips.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_mips.deb


• Debian w3mmee-img_0.3.p23.3-1.5_mipsel.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_mipsel.deb


• Debian w3mmee-img_0.3.p23.3-1.5_powerpc.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_powerpc.deb


• Debian w3mmee-img_0.3.p23.3-1.5_s390.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_s390.deb


• Debian w3mmee-img_0.3.p23.3-1.5_sparc.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee-img_0.3.p 23.3-1.5_sparc.deb


• Debian w3mmee_0.3.p23.3-1.5_alpha.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_alpha.deb


• Debian w3mmee_0.3.p23.3-1.5_arm.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_arm.deb


• Debian w3mmee_0.3.p23.3-1.5_hppa.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_hppa.deb


• Debian w3mmee_0.3.p23.3-1.5_i386.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_i386.deb


• Debian w3mmee_0.3.p23.3-1.5_ia64.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_ia64.deb


• Debian w3mmee_0.3.p23.3-1.5_m68k.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_m68k.deb


• Debian w3mmee_0.3.p23.3-1.5_mips.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_mips.deb


• Debian w3mmee_0.3.p23.3-1.5_mipsel.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_mipsel.deb


• Debian w3mmee_0.3.p23.3-1.5_powerpc.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_powerpc.deb


• Debian w3mmee_0.3.p23.3-1.5_s390.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_s390.deb


• Debian w3mmee_0.3.p23.3-1.5_sparc.deb
  http://security.debian.org/pool/updates/main/w/w3mmee/w3mmee_0.3.p23.3 -1.5_sparc.deb

W3M w3mmee-ssl 0.3 .p23.3

• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_alpha.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_alpha.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_arm.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_arm.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_hppa.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_hppa.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_i386.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_i386.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_ia64.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_ia64.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_m68k.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_m68k.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_mips.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_mips.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_mipsel.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_mipsel.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_powerpc.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_powerpc.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_s390.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_s390.deb


• Debian w3mmee-ssl_0.3.p23.3-1.5.woody_sparc.deb
  Debian 3.0 woody.
  http://security.debian.org/pool/updates/main/w/w3mmee-ssl/w3mmee-ssl_0 .3.p23.3-1.5_sparc.deb

W3M W3M 0.3

• Debian w3m-img_0.3-2.4.woody_alpha.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_alp ha.deb


• Debian w3m-img_0.3-2.4.woody_hppa.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_hpp a.deb


• Debian w3m-img_0.3-2.4.woody_i386.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_i38 6.deb


• Debian w3m-img_0.3-2.4.woody_m68k.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_m68 k.deb


• Debian w3m-img_0.3-2.4.woody_mips.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_mip s.deb


• Debian w3m-img_0.3-2.4.woody_mipsel.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_mip sel.deb


• Debian w3m-img_0.3-2.4.woody_powerpc.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_pow erpc.deb


• Debian w3m-img_0.3-2.4.woody_s390.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_s39 0.deb


• Debian w3m-img_0.3-2.4.woody_sparc.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m-img_0.3-2.4_spa rc.deb


• Debian w3m-ssl_0.3-2.4.woody_alpha.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _alpha.deb


• Debian w3m-ssl_0.3-2.4.woody_arm.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _arm.deb


• Debian w3m-ssl_0.3-2.4.woody_hppa.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _hppa.deb


• Debian w3m-ssl_0.3-2.4.woody_i386.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _i386.deb


• Debian w3m-ssl_0.3-2.4.woody_m68k.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _m68k.deb


• Debian w3m-ssl_0.3-2.4.woody_mips.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _mips.deb


• Debian w3m-ssl_0.3-2.4.woody_mipsel.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _mipsel.deb


• Debian w3m-ssl_0.3-2.4.woody_powerpc.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _powerpc.deb


• Debian w3m-ssl_0.3-2.4.woody_s390.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _s390.deb


• Debian w3m-ssl_0.3-2.4.woody_sparc.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m-ssl/w3m-ssl_0.3-2.4 _sparc.deb


• Debian w3m_0.3-2.4.woody_alpha.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_alpha.d eb


• Debian w3m_0.3-2.4.woody_arm.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_arm.deb


• Debian w3m_0.3-2.4.woody_hppa.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_hppa.de b


• Debian w3m_0.3-2.4.woody_i386.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_i386.de b


• Debian w3m_0.3-2.4.woody_m68k.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_m68k.de b


• Debian w3m_0.3-2.4.woody_mips.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_mips.de b


• Debian w3m_0.3-2.4.woody_mipsel.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_mipsel. deb


• Debian w3m_0.3-2.4.woody_powerpc.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_powerpc .deb


• Debian w3m_0.3-2.4.woody_s390.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_s390.de b


• Debian w3m_0.3-2.4.woody_sparc.deb
  Debian woody 3.0.
  http://security.debian.org/pool/updates/main/w/w3m/w3m_0.3-2.4_sparc.d eb


• RedHat w3m-0.3.1-4.7x.1.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/w3m-0.3.1-4.7x.1.i386.rpm

W3M W3M 0.3.1

• Conectiva w3m-0.3.1-105.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/i386/RPMS.core/w3m-0.3.1-105.i58 6.rpm


• RedHat w3m-0.3.1-6.i386.rpm
  ftp://updates.redhat.com/8.0/en/os/i386/w3m-0.3.1-6.i386.rpm

W3M Image Attribute Cross Site Scripting Vulnerability

References:

• W3M Homepage (W3M)