[Secure-testing-commits] r8540 - data/CVE

[jmm-guest at alioth.debian.org]

Author: jmm-guest
Date: 2008-04-16 18:57:22 +0000 (Wed, 16 Apr 2008)
New Revision: 8540

Modified:
   data/CVE/list
Log:
new clamav issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-04-16 17:29:05 UTC (rev 8539)
+++ data/CVE/list	2008-04-16 18:57:22 UTC (rev 8540)
@@ -1,3 +1,7 @@
+CVE-2008-1837 [clamav 0.93 rar issue]
+	- clamav <not-affected> (Debian doesn't include libunrar since it's non-free)
+CVE-2008-1835 [clamav 0.93 rar issue]
+	- clamav <not-affected> (Debian doesn't include libunrar since it's non-free)
 CVE-2008-1832 [secilia insecure tmp file usage]
 	- cecilia <unfixed> (low; bug #476321)
 CVE-2008-1781
@@ -860,8 +864,10 @@
 	RESERVED
 CVE-2008-1388
 	RESERVED
-CVE-2008-1387
+CVE-2008-1387 [clamav 0.93 unarj issue]
 	RESERVED
+	- clamav <unfixed>
+        [etch] - clamav <not-affected> (Vulnerable code not present)
 CVE-2008-1386
 	RESERVED
 CVE-2008-1385
@@ -1572,7 +1578,7 @@
 CVE-2008-1101 (Buffer overflow in kvdocve.dll in the KeyView document viewing engine ...)
 	TODO: check
 CVE-2008-1100 (Buffer overflow in the cli_scanpe function in libclamav ...)
-	TODO: check
+        - clamav <unfixed>
 CVE-2008-1099 (_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not ...)
 	{DSA-1514-1}
 	- moin 1.5.8-5.1
@@ -3353,8 +3359,9 @@
 	RESERVED
 CVE-2008-0315
 	RESERVED
-CVE-2008-0314
+CVE-2008-0314 [clamav spin overflow]
 	RESERVED
+        - clamav <unfixed>
 CVE-2008-0313 (The ActiveDataInfo.LaunchProcess method in the ...)
 	NOT-FOR-US: Symantec Norton products
 CVE-2008-0312 (Stack-based buffer overflow in the AutoFix Support Tool ActiveX ...)