{"schemaVersion":3,"id":"CVE-2006-6772","aliases":["DEBIAN-CVE-2006-6772"],"status":"published","duplicateOf":null,"title":null,"description":"Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL.","dates":{"published":"2006-12-27T23:00:00.000Z","modified":"2024-08-07T20:42:06.528Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04822,"percentile":0.91932,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.12300000000000019,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.04699},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04822,"percentile":0.91932}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04699,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04822,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04822,"percentile":0.91932}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-134","name":"Use of Externally-Controlled Format String","description":"The product uses a function that accepts a format string as an argument, but the format string originates from an external source.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/134.html"}],"affected":[{"vendor":"debian","product":"w3m","name":"w3m","label":"w3m","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/w3m","purlType":"deb","versions":[{"text":"< 0.5.1-5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.1-5.1","eol":null,"hubHref":null},{"vendor":"w3m","product":"w3m","name":"w3m","label":"w3m","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"0.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"0.5.1","eol":null,"hubHref":"/vendor/w3m/w3m"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log","label":"w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log","hostname":"w3m.cvs.sourceforge.net","tags":["X Refsource CONFIRM"]},{"url":"http://fedoranews.org/cms/node/2415","label":"fedoranews.org/cms/node/2415","hostname":"fedoranews.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html","label":"lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html","hostname":"lists.grok.org.uk","tags":["Mailing List","X Refsource FULLDISC"]},{"url":"http://www.vupen.com/english/advisories/2006/5164","label":"www.vupen.com/english/advisories/2006/5164","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html","label":"www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html","hostname":"www.openpkg.com","tags":["Vendor Advisory","X Refsource OPENPKG"]},{"url":"http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250","label":"w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250","hostname":"w3m.cvs.sourceforge.net","tags":["X Refsource CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31114","label":"exchange.xforce.ibmcloud.com/vulnerabilities/31114","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://secunia.com/advisories/23717","label":"secunia.com/advisories/23717","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-06.xml","label":"security.gentoo.org/glsa/glsa-200701-06.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/23492","label":"secunia.com/advisories/23492","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23792","label":"secunia.com/advisories/23792","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79","label":"w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79","hostname":"w3m.cvs.sourceforge.net","tags":["X Refsource CONFIRM"]},{"url":"http://securitytracker.com/id?1017440","label":"securitytracker.com/id?1017440","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34821","label":"exchange.xforce.ibmcloud.com/vulnerabilities/34821","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439","label":"sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439","hostname":"sourceforge.net","tags":["X Refsource MISC"]},{"url":"http://www.novell.com/linux/security/advisories/2007_05_w3m.html","label":"www.novell.com/linux/security/advisories/2007_05_w3m.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.securityfocus.com/bid/21735","label":"www.securityfocus.com/bid/21735","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.securityfocus.com/bid/24332","label":"www.securityfocus.com/bid/24332","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.ubuntu.com/usn/usn-399-1","label":"www.ubuntu.com/usn/usn-399-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/23773","label":"secunia.com/advisories/23773","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23588","label":"secunia.com/advisories/23588","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://fedoranews.org/cms/node/2416","label":"fedoranews.org/cms/node/2416","hostname":"fedoranews.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-6772","label":"security-tracker.debian.org/tracker/CVE-2006-6772","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:11504-1"],"duplicates":["CVE-2007-3125"],"related":["OPENSUSE-SU-2024:11504-1"]},"timeline":[{"kind":"published","date":"2006-12-27T23:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T20:42:06.528Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T13:39:25.751Z","stale":false,"partial":false}}