CVE-2016-9424

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m doesn't properly validate the value of tag attribute, which allows remote attackers to cause a denial of service (heap buffer overflow crash) and possibly execute arbitrary code via a crafted HTML page.

• CWE-119

• http://www.openwall.com/lists/oss-security/2016/11/18/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94407
• https://github.com/tats/w3m/blob/master/ChangeLogIssue Tracking, Patch
• https://github.com/tats/w3m/issues/12Issue Tracking, Patch
• https://security.gentoo.org/glsa/201701-08
• http://www.openwall.com/lists/oss-security/2016/11/18/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94407
• https://github.com/tats/w3m/blob/master/ChangeLogIssue Tracking, Patch
• https://github.com/tats/w3m/issues/12Issue Tracking, Patch
• https://security.gentoo.org/glsa/201701-08

Published

Dec 12, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9418MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB …
• CVE-2016-9419Cross-site scripting (XSS) vulnerability in the Admin contro…
• CVE-2016-9420MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge Syste…
• CVE-2016-9421Cross-site scripting (XSS) vulnerability in the Users module…
• CVE-2016-9422An issue was discovered in the Tatsuya Kinoshita w3m fork be…
• CVE-2016-9423An issue was discovered in the Tatsuya Kinoshita w3m fork be…
• CVE-2016-9425An issue was discovered in the Tatsuya Kinoshita w3m fork be…
• CVE-2016-9426An issue was discovered in the Tatsuya Kinoshita w3m fork be…
• CVE-2016-9427Integer overflow vulnerability in bdwgc before 2016-09-27 al…9.8
• CVE-2016-9428An issue was discovered in the Tatsuya Kinoshita w3m fork be…8.8
• CVE-2016-9429An issue was discovered in the Tatsuya Kinoshita w3m fork be…
• CVE-2016-9430An issue was discovered in the Tatsuya Kinoshita w3m fork be…