NVD

Id
65316  
Name
CVE-2006-6772  
Description
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-27  
Modified Date
2011-10-18  
Seq
2006-6772  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340825 65316 CVE-2006-6772 FEDORA-2007-077  View
340826 65316 CVE-2006-6772 FEDORA-2007-078  View
340827 65316 CVE-2006-6772 20061225 w3m format string bug  View
340828 65316 CVE-2006-6772 GLSA-200701-06  View
340829 65316 CVE-2006-6772 1017440  View
340830 65316 CVE-2006-6772 http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439  View
340831 65316 CVE-2006-6772 http://w3m.cvs.sourceforge.net/*checkout*/w3m/w3m/NEWS?revision=1.79  View
340832 65316 CVE-2006-6772 http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250  View
340833 65316 CVE-2006-6772 http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log  View
340834 65316 CVE-2006-6772 SUSE-SA:2007:005  View
340835 65316 CVE-2006-6772 OpenPKG-SA-2006.44  View
340836 65316 CVE-2006-6772 21735  View
340837 65316 CVE-2006-6772 24332  View
340838 65316 CVE-2006-6772 USN-399-1  View
340839 65316 CVE-2006-6772 ADV-2006-5164  View
340840 65316 CVE-2006-6772 w3m-certificate-format-string(31114)  View
340841 65316 CVE-2006-6772 w3m-inputanswer-format-string(34821)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61400 JVNDB-2006-003666 w3m の file.c におけるフォーマットストリングの脆弱性 w3m の file.c の inputAnswer 関数は、ダンプおよびバックエンドのオプションで稼動している場合、フォーマットストリングの脆弱性が存在します。 CVE-2006-6772 22874 CVE-2006-6772 65316 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003666.html 2006-12-27 2012-12-20 View