CVE ID:	CVE-2002-1348
Description:	w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.
Test IDs:	1.3.6.1.4.1.25623.1.0.51198
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-1348 BugTraq ID: 6794 http://www.securityfocus.com/bid/6794 Bugtraq: 20030217 GLSA: w3m (Google Search) http://marc.info/?l=bugtraq&m=104552193927323&w=2 Debian Security Information: DSA-249 (Google Search) http://www.debian.org/security/2003/dsa-249 Debian Security Information: DSA-250 (Google Search) http://www.debian.org/security/2003/dsa-250 Debian Security Information: DSA-251 (Google Search) http://www.debian.org/security/2003/dsa-251 RedHat Security Advisories: RHSA-2003:044 http://www.redhat.com/support/errata/RHSA-2003-044.html RedHat Security Advisories: RHSA-2003:045 http://www.redhat.com/support/errata/RHSA-2003-045.html XForce ISS Database: w3m-img-alt-xss(11266) http://www.iss.net/security_center/static/11266.php