Read the docs
TI-2002-01272 Aliases CVE-2002-1348GHSA-fgpf-gj3f-wvmc

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag…

Priority LOW 27Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.

Why it matters now

EPSS 0.02027 81st percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:w3m:w3m:0.2:*:*:*:*:*:*:*0.2VulnerableW3m
cpe:2.3:a:w3m:w3m:0.2.1:*:*:*:*:*:*:*0.2.1VulnerableW3m
cpe:2.3:a:w3m:w3m:0.2.2:*:*:*:*:*:*:*0.2.2VulnerableW3m
cpe:2.3:a:w3m:w3m:0.2.3:*:*:*:*:*:*:*0.2.3VulnerableW3m
cpe:2.3:a:w3m:w3m:0.2.4:*:*:*:*:*:*:*0.2.4VulnerableW3m
cpe:2.3:a:w3m:w3m:0.2.5:*:*:*:*:*:*:*0.2.5VulnerableW3m
cpe:2.3:a:w3m:w3m:0.2.5.1:*:*:*:*:*:*:*0.2.5.1VulnerableW3m
cpe:2.3:a:w3m:w3m:0.3:*:*:*:*:*:*:*0.3VulnerableW3m
cpe:2.3:a:w3m:w3m:0.3.1:*:*:*:*:*:*:*0.3.1VulnerableW3m
cpe:2.3:a:w3m:w3m:0.3.2:*:*:*:*:*:*:*0.3.2VulnerableW3m
  • cpe:2.3:a:w3m:w3m:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.2.1:*:*:*:*:*:*:* Versions 0.2.1 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.2.2:*:*:*:*:*:*:* Versions 0.2.2 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.2.3:*:*:*:*:*:*:* Versions 0.2.3 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.2.4:*:*:*:*:*:*:* Versions 0.2.4 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.2.5:*:*:*:*:*:*:* Versions 0.2.5 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.2.5.1:*:*:*:*:*:*:* Versions 0.2.5.1 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.3.1:*:*:*:*:*:*:* Versions 0.3.1 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.3.2:*:*:*:*:*:*:* Versions 0.3.2 Vulnerable ·W3m
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:w3m:w3m:0.3.2.1:*:*:*:*:*:*:*0.3.2.1VulnerableW3m
cpe:2.3:a:w3m:w3m:0.3.2.2:*:*:*:*:*:*:*0.3.2.2VulnerableW3m
  • cpe:2.3:a:w3m:w3m:0.3.2.1:*:*:*:*:*:*:* Versions 0.3.2.1 Vulnerable ·W3m
  • cpe:2.3:a:w3m:w3m:0.3.2.2:*:*:*:*:*:*:* Versions 0.3.2.2 Vulnerable ·W3m

Remediation

Red Hat 2 advisories

  • RHSA-2003:044 Released 2003-02-07 · Red Hat rating Moderate
    : Updated w3m packages fix cross-site scripting issues
    • Red Hat Linux 7.0j
    • Red Hat Linux 7.2
    • Red Hat Linux 7.3
    • Red Hat Linux 8.0
  • RHSA-2003:045 Released 2003-02-06 · Red Hat rating Important
    w3m security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2003:045
Red Hat Linux 7.0jFixed RHSA-2003:044
Red Hat Linux 7.2Fixed RHSA-2003:044
Red Hat Linux 7.3Fixed RHSA-2003:044
Red Hat Linux 8.0Fixed RHSA-2003:044
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2003:045

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-1348
  2. 2026-10-03 Alias added: GHSA-fgpf-gj3f-wvmc

References

Patch 2

Advisory 5

Other 1

  • TI-2006-06516 Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2… CVSS 2.0HIGH 9.3
  • TI-2001-00673 Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary… CVSS 2.0HIGH 7.5
  • TI-2010-01988 istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled… CVSS 2.0MEDIUM 6.8
  • TI-2002-01261 Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences