CVE

Id
5732  
CVE No.
CVE-2002-1348  
Status
Entry  
Description
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31752 5732 CVE-2002-1348 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=126233  View
31753 5732 CVE-2002-1348 DEBIAN:DSA-249  View
31754 5732 CVE-2002-1348 URL:http://www.debian.org/security/2003/dsa-249  View
31755 5732 CVE-2002-1348 DEBIAN:DSA-250  View
31756 5732 CVE-2002-1348 URL:http://www.debian.org/security/2003/dsa-250  View
31757 5732 CVE-2002-1348 DEBIAN:DSA-251  View
31758 5732 CVE-2002-1348 URL:http://www.debian.org/security/2003/dsa-251  View
31759 5732 CVE-2002-1348 REDHAT:RHSA-2003:044  View
31760 5732 CVE-2002-1348 URL:http://www.redhat.com/support/errata/RHSA-2003-044.html  View
31761 5732 CVE-2002-1348 REDHAT:RHSA-2003:045  View
31762 5732 CVE-2002-1348 URL:http://www.redhat.com/support/errata/RHSA-2003-045.html  View
31763 5732 CVE-2002-1348 BUGTRAQ:20030217 GLSA: w3m  View
31764 5732 CVE-2002-1348 URL:http://marc.info/?l=bugtraq&m=104552193927323&w=2  View
31765 5732 CVE-2002-1348 BID:6794  View
31766 5732 CVE-2002-1348 URL:http://www.securityfocus.com/bid/6794  View
31767 5732 CVE-2002-1348 XF:w3m-img-alt-xss(11266)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63304 JVNDB-2003-000030 w3m におけるファイルやクッキーにアクセスされる脆弱性 w3m には、IMG タグの ALT 属性において、HTML タグのエスケープを適切に行わないため、ファイルやクッキーへアクセスされる脆弱性が存在します。 CVE-2002-1348 5732 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000030.html  View