CVE-2016-9633

CVE-2016-9633 describes a denial-of-service vulnerability in the Tatsuya Kinoshita w3m fork, specifically versions prior to 0.5.3-33. An attacker can exploit this by crafting a malicious HTML page, leading to an infinite loop and resource exhaustion on the victim's system. Rated as MEDIUM severity (CVSS 6.5), this vulnerability requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L), resulting in high availability impact (A:H). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.