[Secure-testing-commits] r7674 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-12-21 16:19:38 +0000 (Fri, 21 Dec 2007)
New Revision: 7674

Modified:
   data/CVE/list
Log:
new issue: libexif (CVE-2007-6351, CVE-2007-6352)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-12-21 15:55:26 UTC (rev 7673)
+++ data/CVE/list	2007-12-21 16:19:38 UTC (rev 7674)
@@ -268,9 +268,9 @@
 CVE-2007-6354 (Unspecified vulnerability in exiftags before 1.01 has unknown impact ...)
 	- exiftags <unfixed> (bug #457062)
 CVE-2007-6352 (Integer overflow in libexif 0.6.16 and earlier allows ...)
-	TODO: check
+	- libexif <unfixed> (medium; bug #457330)
 CVE-2007-6351 (libexif 0.6.16 and earlier allows context-dependent attackers to cause ...)
-	TODO: check
+	- libexif <unfixed> (low; bug #457330)
 CVE-2007-6349 (P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on ...)
 	NOT-FOR-US: P4Web
 CVE-2007-6418 (The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the ...)