Debian/w3m: medium 4.7
w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.
Action: Upgrade w3m to 0.5.3-36 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.3-36 | - |
Fixed versions
| 0.5.3-36 |
Sources
published · modified · JSON