NVD

Id
80301  
Name
CVE-2002-1348  
Description
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-05  
Published
2003-02-19  
Modified Date
2016-10-17  
Seq
2002-1348  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400389 80301 CVE-2002-1348 20030217 GLSA: w3m  View
400390 80301 CVE-2002-1348 http://sourceforge.net/project/shownotes.php?release_id=126233  View
400391 80301 CVE-2002-1348 DSA-249  View
400392 80301 CVE-2002-1348 DSA-250  View
400393 80301 CVE-2002-1348 DSA-251  View
400394 80301 CVE-2002-1348 w3m-img-alt-xss(11266)  View
400395 80301 CVE-2002-1348 RHSA-2003:044  View
400396 80301 CVE-2002-1348 RHSA-2003:045  View
400397 80301 CVE-2002-1348 6794  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63304 JVNDB-2003-000030 w3m におけるファイルやクッキーにアクセスされる脆弱性 w3m には、IMG タグの ALT 属性において、HTML タグのエスケープを適切に行わないため、ファイルやクッキーへアクセスされる脆弱性が存在します。 CVE-2002-1348 5732 CVE-2002-1348 80301 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000030.html 2003-02-06 2007-04-01 View