Vulnerability Name:

CVE-2002-1348 (CCN-11266)

Assigned:2002-12-04
Published:2002-12-04
Updated:2016-10-18
Summary:w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2002-1348

Source: BUGTRAQ
Type: UNKNOWN
20030217 GLSA: w3m

Source: CCN
Type: RHSA-2003-044
Updated w3m packages fix cross-site scripting issues

Source: CCN
Type: RHSA-2003-045
w3m security update

Source: CCN
Type: SourceForge.net
Project: w3m: Release Notes: w3m-0.3.2.2

Source: CONFIRM
Type: Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=126233

Source: DEBIAN
Type: UNKNOWN
DSA-249

Source: DEBIAN
Type: UNKNOWN
DSA-250

Source: DEBIAN
Type: UNKNOWN
DSA-251

Source: DEBIAN
Type: DSA-249
w3mmee -- missing HTML quoting

Source: DEBIAN
Type: DSA-250
w3mmee-ssl -- missing HTML quoting

Source: DEBIAN
Type: DSA-251
w3m -- missing HTML quoting

Source: XF
Type: Patch, Vendor Advisory
w3m-img-alt-xss(11266)

Source: CCN
Type: Gentoo Linux Security Announcement 200302-07
w3m -- missing HTML quoting

Source: CCN
Type: OpenPKG-SA-2003.009
w3m

Source: REDHAT
Type: Patch, Vendor Advisory
RHSA-2003:044

Source: REDHAT
Type: UNKNOWN
RHSA-2003:045

Source: BID
Type: UNKNOWN
6794

Source: CCN
Type: BID-6794
W3M Image Attribute Cross Site Scripting Vulnerability

Source: XF
Type: UNKNOWN
w3m-img-alt-xss(11266)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:w3m:w3m:0.2:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.2.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.3:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.3.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:w3m:w3m:0.3.2.2:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:redhat:linux:7.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:7.3:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:3.0:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:current:*:*:*:*:*:*:*
  • OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux:8.0:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:1.1:*:*:*:*:*:*:*
  • OR cpe:/a:openpkg:openpkg:1.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20021348
    V
    		CVE-2002-1348
    2015-11-16
    oval:org.debian:def:251
    V
    		missing HTML quoting
    2003-02-14
    oval:org.debian:def:250
    V
    		missing HTML quoting
    2003-02-12
    oval:org.debian:def:249
    V
    		missing HTML quoting
    2003-02-11
    BACK
    w3m w3m 0.2
    w3m w3m 0.2.1
    w3m w3m 0.2.2
    w3m w3m 0.2.3
    w3m w3m 0.2.4
    w3m w3m 0.2.5
    w3m w3m 0.2.5.1
    w3m w3m 0.3
    w3m w3m 0.3.1
    w3m w3m 0.3.2
    w3m w3m 0.3.2.1
    w3m w3m 0.3.2.2
    redhat linux 7.2
    redhat linux 7.3
    debian debian linux 3.0
    openpkg openpkg current
    gentoo linux *
    redhat linux 8.0
    openpkg openpkg 1.1
    openpkg openpkg 1.2
    redhat enterprise linux 2.1
    redhat linux advanced workstation 2.1