← Back

CVE-2002-1348

nvd nist
Published: Feb 19, 2003Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.

Affected (12)

Products: W3m: W3m
W3m
1 product
W3m
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
W3m
W3m
Version 0.2.1
W3m
Version 0.2.2
W3m
Version 0.2.3
W3m
Version 0.2.4
W3m
Version 0.2.5.1
W3m
Version 0.2.5
W3m
Version 0.2
W3m
Version 0.3.1
W3m
Version 0.3.2.1
W3m
Version 0.3.2.2
W3m
Version 0.3.2
W3m
Version 0.3

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.