[Secure-testing-commits] r3406 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-02-01 10:11:16 +0000 (Wed, 01 Feb 2006)
New Revision: 3406

Modified:
   data/CVE/list
Log:
xpdf, the sendmail of the 21st century, strikes again


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-02-01 10:04:35 UTC (rev 3405)
+++ data/CVE/list	2006-02-01 10:11:16 UTC (rev 3406)
@@ -368,8 +368,16 @@
 	NOT-FOR-US: Joomla! 
 CVE-2006-0302 (ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 ...)
 	NOT-FOR-US: ZyXel hardware
-CVE-2006-0301
+CVE-2006-0301 [another xpdf heap overflow in splash handling]
 	RESERVED
+	- poppler <unfixed>
+	- tetex-bin 3.0-12
+	- kdegraphics <unfixed>
+	- gpdf <unfixed>
+	- xpdf <unfixed> (bug #350785)
+	- koffice <unfixed>
+	- libextractor <unfixed>
+	- pdfkit.framework <unfixed>
 CVE-2006-0300
 	RESERVED
 CVE-2006-0299