CVE:CVE-2010-2074
CNNVD:CNNVD-201006-270
w3m是一款开源的基于文本的Web浏览器。
w3m的istream存在漏洞，当开启ssl_verify_server时，无法正确处理X.509证书(1)主题的公用名或(2)主题备用名中某域名的'\0'字符，攻击者可以利用合法认证机构颁发的特制证书冒充任意SSL服务器。
solution:Upgrade w3m w3m to a higher version than 0.5.2,and avoid the version 0.5.2
solution:Upgrade ca psformx_active_x_control to a higher version than 56393399-041a-4650-94c7-13dfcb1f4665,and avoid the version 56393399-041a-4650-94c7-13dfcb1f4665; Upgrade ca webscan_active_x_control to a higher version than 7b297bfd-85e4-4092-b2af-16a91b2ea103,and avoid the version 7b297bfd-85e4-4092-b2af-16a91b2ea103