CVE ID:	CVE-2002-1335
Description:	Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.
Test IDs:	1.3.6.1.4.1.25623.1.0.51198
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1335 BugTraq ID: 6793 http://www.securityfocus.com/bid/6793 Debian Security Information: DSA-249 (Google Search) http://www.debian.org/security/2003/dsa-249 Debian Security Information: DSA-250 (Google Search) http://www.debian.org/security/2003/dsa-250 Debian Security Information: DSA-251 (Google Search) http://www.debian.org/security/2003/dsa-251 http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html http://www.osvdb.org/6981 RedHat Security Advisories: RHSA-2003:044 http://www.redhat.com/support/errata/RHSA-2003-044.html RedHat Security Advisories: RHSA-2003:045 http://www.redhat.com/support/errata/RHSA-2003-045.html http://secunia.com/advisories/8015 http://secunia.com/advisories/8016 http://secunia.com/advisories/8031 http://secunia.com/advisories/8053 XForce ISS Database: w3m-html-frame-xss(10842) https://exchange.xforce.ibmcloud.com/vulnerabilities/10842