{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"w3m","vendor":"n/a"},{"collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected","packageName":"w3m","product":"Fedora","vendor":"Fedora"},{"collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected","packageName":"w3m","product":"Extra Packages for Enterprise Linux","vendor":"Fedora"}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:tats:w3m:0.5.3\\+git20230121-1:*:*:*:*:*:*:*","matchCriteriaId":"7A31CA22-C625-4E9C-9C57-CCDBC9E9B99A","vulnerable":true},{"criteria":"cpe:2.3:a:tats:w3m:0.5.3\\+git20230121-2:*:*:*:*:*:*:*","matchCriteriaId":"9E2BDFFC-F30D-47CE-B32E-E4C1713ACF1C","vulnerable":true},{"criteria":"cpe:2.3:a:tats:w3m:0.5.3\\+git20230129:*:*:*:*:*:*:*","matchCriteriaId":"BB9F94C4-C1FC-4CD9-B5B4-E745E4B3BCBC","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"BB176AC3-3CDA-4DDA-9089-C67B2F73AA62","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","matchCriteriaId":"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition."},{"lang":"es","value":"Se descubrió un problema de escritura fuera de los límites en el manejo de retroceso de la función checkType() en etc.c dentro de la aplicación W3M. Esta vulnerabilidad se activa al proporcionar un archivo HTML especialmente manipulado al binario w3m. La explotación de este fallo podría provocar fallos en la aplicación, lo que resultaría en una condición de denegación de servicio."}],"id":"CVE-2023-4255","lastModified":"2026-06-17T06:37:25.357","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"secalert@redhat.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-12-21T16:15:10.017","references":[{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255207"},{"source":"secalert@redhat.com","tags":["Patch"],"url":"https://github.com/tats/w3m/commit/edc602651c506aeeb60544b55534dd1722a340d3"},{"source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch"],"url":"https://github.com/tats/w3m/issues/268"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Patch"],"url":"https://github.com/tats/w3m/pull/273"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/"},{"source":"secalert@redhat.com","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255207"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/tats/w3m/commit/edc602651c506aeeb60544b55534dd1722a340d3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch"],"url":"https://github.com/tats/w3m/issues/268"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"],"url":"https://github.com/tats/w3m/pull/273"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AULOBQJLXE2KCT5UVQMKGEFL4GFIAOED/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKFZQUK7FPWWJQYICDZZ4YWIPUPQ2D3R/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TODROGVCWZ435HQIZE6ARQC5LPQLIA5C/"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}