CVE-2002-1335 Information

Description

Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.

Reference

http://mi.med.tohoku.ac.jp/7Esatodai/w3m-dev-en/200211.month/838.html http://secunia.com/advisories/8015 http://secunia.com/advisories/8016 http://secunia.com/advisories/8031 http://secunia.com/advisories/8053 http://sourceforge.net/project/shownotes.php?release_id=124484 http://www.debian.org/security/2003/dsa-249 http://www.debian.org/security/2003/dsa-250 http://www.debian.org/security/2003/dsa-251 http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html http://www.osvdb.org/6981 http://www.redhat.com/support/errata/RHSA-2003-044.html http://www.redhat.com/support/errata/RHSA-2003-045.html http://www.securityfocus.com/bid/6793 https://exchange.xforce.ibmcloud.com/vulnerabilities/10842