CVE:CVE-2016-9435
CNNVD:CNNVD-201611-567
w3m是一款开源的基于文本的Web浏览器。
w3m 0.5.3+git20161009之前地版本中的file.c文件的‘HTMLtagproc1’函数存在安全漏洞，该漏洞源于程序没有正确的初始化值。远程攻击者可借助特制的html文件利用该漏洞造成应用程序崩溃。
solution:Upgrade opensuse leap to a higher version than 42.2,and avoid the version 42.2; Upgrade opensuse_project leap to a higher version than 42.1,and avoid the version 42.1; Upgrade w3m_project w3m to a higher version than 0.5.3\+git20160718,and avoid the version (,0.5.3\+git20160718]