CVE-2006-6772

N/A Unknown
Published: December 27, 2006 Modified: April 23, 2026
View on NVD

Description

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://fedoranews.org/cms/node/2415
Source: cve@mitre.org
http://fedoranews.org/cms/node/2416
Source: cve@mitre.org
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html
Source: cve@mitre.org
http://secunia.com/advisories/23492
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23588
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23717
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23773
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/23792
Source: cve@mitre.org
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200701-06.xml
Source: cve@mitre.org
http://securitytracker.com/id?1017440
Source: cve@mitre.org
http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439
Source: cve@mitre.org
http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79
Source: cve@mitre.org
http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250
Source: cve@mitre.org
http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log
Source: cve@mitre.org
http://www.novell.com/linux/security/advisories/2007_05_w3m.html
Source: cve@mitre.org
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html
Source: cve@mitre.org
http://www.securityfocus.com/bid/21735
Source: cve@mitre.org
http://www.securityfocus.com/bid/24332
Source: cve@mitre.org
http://www.ubuntu.com/usn/usn-399-1
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2006/5164
Source: cve@mitre.org
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31114
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/34821
Source: cve@mitre.org
http://fedoranews.org/cms/node/2415
Source: af854a3a-2127-422b-91ae-364da2661108
http://fedoranews.org/cms/node/2416
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/23492
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23588
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23717
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23773
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/23792
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200701-06.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1017440
Source: af854a3a-2127-422b-91ae-364da2661108
http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439
Source: af854a3a-2127-422b-91ae-364da2661108
http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79
Source: af854a3a-2127-422b-91ae-364da2661108
http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250
Source: af854a3a-2127-422b-91ae-364da2661108
http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.novell.com/linux/security/advisories/2007_05_w3m.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/21735
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/24332
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/usn-399-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2006/5164
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31114
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/34821
Source: af854a3a-2127-422b-91ae-364da2661108

44 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
13.8%
94th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-134

Affected Vendors

w3m

Related CVEs

CVE-2026-7513 8.8
CVE-2026-7512 8.8
CVE-2026-5656 7.0
CVE-2026-5405 7.8
CVE-2026-5404 4.7