[Secure-testing-commits] r8611 - data/CVE

Fri Apr 25 12:23:14 UTC 2008

Author: nion
Date: 2008-04-25 12:23:12 +0000 (Fri, 25 Apr 2008)
New Revision: 8611

Modified:
   data/CVE/list
Log:
NFUs
new/old vlc issue (CVE-2008-1881)
CVE-2007-6715 potential non-issue
new blender issue (CVE-2008-1102)


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2008-04-25 11:37:13 UTC (rev 8610)
+++ data/CVE/list	2008-04-25 12:23:12 UTC (rev 8611)
@@ -77,13 +77,15 @@
 CVE-2008-1882
 	RESERVED
 CVE-2008-1881 (Stack-based buffer overflow in the ParseSSA function ...)
-	TODO: check
+	- vlc <unfixed> (medium; bug #477805)
 CVE-2008-1880
 	RESERVED
 CVE-2008-1879
 	RESERVED
 CVE-2007-6715 (Mozilla Firefox allows remote attackers to cause a denial of service ...)
-	TODO: check
+	- iceweasel <unfixed> (unimportant)
+	NOTE: browser dos not treated as security issues
+	NOTE: cant reproduce on 2.0.0.12-1 and 2.0.0.14-2, already fixed?
 CVE-2008-XXXX [unspecified egroupware issue]
 	- egroupware <unfixed> (bug #476977)
 	TODO: request CVE id
@@ -382,7 +384,7 @@
 CVE-2008-1735
 	RESERVED
 CVE-2008-1734 (Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux ...)
-	TODO: check
+	NOT-FOR-US: PHP Toolkit (Gentoo specific)
 CVE-2008-1733 (SQL injection vulnerability in puarcade.class.php 2.2 and earlier in ...)
 	NOT-FOR-US: Joomla component Pragmatic Utopia PU Arcade
 CVE-2008-1732 (SQL injection vulnerability in showpredictionsformatch.php in ...)
@@ -658,7 +660,7 @@
 	{DSA-1550-1 DTSA-124-1}
 	- suphp <unfixed> (low; bug #475431)
 CVE-2008-1613 (SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build ...)
-	TODO: check
+	NOT-FOR-US: RedDot CMS
 CVE-2008-1612 (The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows ...)
 	- squid 2.6.18-1 (medium)
 CVE-2008-1611 (Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows ...)
@@ -1053,7 +1055,7 @@
 CVE-2008-1437
 	RESERVED
 CVE-2008-1436 (Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 ...)
-	TODO: check
+	NOT-FOR-US: Windows
 CVE-2008-1435
 	RESERVED
 CVE-2008-1434
@@ -1882,7 +1884,7 @@
 CVE-2008-1103
 	RESERVED
 CVE-2008-1102 (Stack-based buffer overflow in the imb_loadhdr function in Blender ...)
-	TODO: check
+	- blender <unfixed> (medium; bug #477808)
 CVE-2008-1101 (Buffer overflow in kvdocve.dll in the KeyView document viewing engine ...)
 	NOT-FOR-US: KeyView
 CVE-2008-1100 (Buffer overflow in the cli_scanpe function in libclamav ...)
@@ -4296,11 +4298,11 @@
 CVE-2008-0069 (Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows ...)
 	NOT-FOR-US: XnView
 CVE-2008-0068 (Directory traversal vulnerability in OpenView5.exe in HP OpenView ...)
-	TODO: check
+	NOT-FOR-US: HP OpenView
 CVE-2008-0067
 	RESERVED
 CVE-2008-0066 (Multiple buffer overflows in htmsr.dll in the HTML speed reader in ...)
-	TODO: check
+	NOT-FOR-US: KeyView
 CVE-2008-0065 (Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, ...)
 	NOT-FOR-US: Winamp
 CVE-2008-0064 (Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView ...)
@@ -5990,7 +5992,7 @@
 CVE-2007-6021
 	RESERVED
 CVE-2007-6020 (Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat ...)
-	TODO: check
+	NOT-FOR-US: KeyView
 CVE-2007-6019 (Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, ...)
 	TODO: check
 CVE-2007-6018 (IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde ...)
@@ -6688,7 +6690,7 @@
 CVE-2007-5759
 	REJECTED
 CVE-2007-5758 (Stack-based buffer overflow in db2dasrrm in the DB2 Administration ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2007-5757 (Untrusted search path vulnerability in db2pd in IBM DB2 Universal ...)
 	NOT-FOR-US: IBM DB2
 CVE-2007-5756 (Multiple array index errors in the bpf_filter_init function in NPF.SYS ...)
@@ -7225,7 +7227,7 @@
 CVE-2007-5665 (STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ...)
 	NOT-FOR-US: Novell ZENworks Endpoint Security Management
 CVE-2007-5664 (db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal ...)
-	TODO: check
+	NOT-FOR-US: IBM DB2
 CVE-2007-5663 (Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to ...)
 	NOT-FOR-US: Adobe Reader
 CVE-2007-5662
@@ -8152,9 +8154,9 @@
 CVE-2007-5407 (Multiple PHP remote file inclusion vulnerabilities in the ...)
 	NOT-FOR-US: Joomla! extension
 CVE-2007-5406 (kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in ...)
-	TODO: check
+	NOT-FOR-US: KeyView
 CVE-2007-5405 (Multiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the ...)
-	TODO: check
+	NOT-FOR-US: KeyView
 CVE-2007-5404 (Layton HelpBox 3.7.1 generates different responses depending on ...)
 	NOT-FOR-US: Layton HelpBox
 CVE-2007-5403 (Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox ...)
@@ -8166,7 +8168,7 @@
 CVE-2007-5400
 	RESERVED
 CVE-2007-5399 (Multiple heap-based buffer overflows in emlsr.dll in the EML reader in ...)
-	TODO: check
+	NOT-FOR-US: KeyView
 CVE-2007-5398 (Stack-based buffer overflow in the reply_netbios_packet function in ...)
 	{DSA-1409-3 DSA-1409-2 DSA-1409-1}
 	- samba 3.0.27-1 (high)


