Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.40%
Published
Jan 25, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.
Weaknesses (CWE)
Affected Products (5)
References (14)