CVE-2018-6196

2018-01-2503:29:00

Google

osv.dev

0.007 Low

EPSS

Percentile

81.0%

JSON

w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.

CPENameOperatorVersion
w3meq0.5.3+git20151010
w3mequpstream/0.5.1
w3meq0.5.3+git20160228
w3meq0.5.3+git20150811
w3meq0.5.3+git20150720
w3meq0.5.3+git20170102
w3meq0.5.3+git20151119
w3meq0.5.3+debian-19
w3mequpstream/0.1.10+0.1.11pre+kokb23
w3mequpstream/0.5.3

Name	Operator	Version
w3m	eq	0.5.3+git20151010
w3m	eq	upstream/0.5.1
w3m	eq	0.5.3+git20160228
w3m	eq	0.5.3+git20150811
w3m	eq	0.5.3+git20150720
w3m	eq	0.5.3+git20170102
w3m	eq	0.5.3+git20151119
w3m	eq	0.5.3+debian-19
w3m	eq	upstream/0.1.10+0.1.11pre+kokb23
w3m	eq	upstream/0.5.3