CVE-2006-6772
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run...
CVE-2006-6772 is a high vulnerability (CVSS 9.3) in W3m, published December 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.82%, the 92nd percentile. Fixed in w3m 0.5.1-5.1.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 4.82%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.5.1-5.1w3m +3 more
Description
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
- Record
CVE-2006-6772- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
- Record
CVE-2006-6772- Updated
- 2026-11-02
EUVDEUVD-2006-6755No score
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
- Record
EUVD-2006-6755- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x9rf-x2gc-ppgwNo score
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run...
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
- Record
GHSA-x9rf-x2gc-ppgw- Weakness
- CWE-134
- Updated
- 2026-11-02
OSVNo score
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
- Record
CVE-2006-6772- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-6772No score
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.
- Record
DEBIAN-CVE-2006-6772- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11504-1No score
w3m-0.5.3+git20180125-1.14 on GA media
These are all security issues fixed in the w3m-0.5.3+git20180125-1.14 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11504-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log
fedoranews.org/cms/node/2415
lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html
vupen.com/english/advisories/2006/5164
openpkg.com/security/advisories/OpenPKG-SA-2006.044.html
Show 24 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/31114
secunia.com/advisories/23717
security.gentoo.org/glsa/glsa-200701-06.xml
securitytracker.com/id?1017440
sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439
novell.com/linux/security/advisories/2007_05_w3m.html
securityfocus.com/bid/21735
ubuntu.com/usn/usn-399-1
nvd.nist.gov/vuln/detail/CVE-2006-6772
github.com/advisories/GHSA-x9rf-x2gc-ppgw
security-tracker.debian.org/tracker/CVE-2006-6772
suse.com/security/cve/CVE-2006-6772