[Secure-testing-commits] r10678 - data/CVE

atomo64-guest at alioth.debian.org atomo64-guest at alioth.debian.org
Thu Dec 11 20:32:30 UTC 2008 

Author: atomo64-guest
Date: 2008-12-11 20:32:30 +0000 (Thu, 11 Dec 2008)
New Revision: 10678

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-12-11 18:27:22 UTC (rev 10677)
+++ data/CVE/list	2008-12-11 20:32:30 UTC (rev 10678)
@@ -107,9 +107,9 @@
 CVE-2008-5366 (The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local ...)
 	TODO: check
 CVE-2008-5365 (SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ...)
-	TODO: check
+	NOT-FOR-US: ActiveWebSoftwares
 CVE-2008-5364 (Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx ...)
-	TODO: check
+	NOT-FOR-US: getPlus
 CVE-2008-5363 (The ActionScript 2 virtual machine in Adobe Flash Player 10.x before ...)
 	TODO: check
 CVE-2008-5362 (The DefineConstantPool action in the ActionScript 2 virtual machine in ...)
@@ -1088,7 +1088,7 @@
 	- nagios3 3.0.6-1 (low; bug #504894)
 	[etch] - nagios2 <no-dsa> (CSRF can only cause DoS and needs admin's browser)
 CVE-2008-4917 (Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and ...)
-	TODO: check
+	NOT-FOR-US: VMware Workstation
 CVE-2008-4916
 	RESERVED
 CVE-2008-4915 (The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and ...)
@@ -1282,7 +1282,7 @@
 CVE-2008-4842
 	RESERVED
 CVE-2008-4841 (The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows
 CVE-2008-4840
 	RESERVED
 CVE-2008-4839
@@ -1290,7 +1290,7 @@
 CVE-2008-4838
 	RESERVED
 CVE-2008-4837 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4836
 	RESERVED
 CVE-2008-4835
@@ -2352,9 +2352,9 @@
 CVE-2008-4392
 	RESERVED
 CVE-2008-4391 (Stack-based buffer overflow in the SetSource method in the ...)
-	TODO: check
+	NOT-FOR-US: Cisco Linksys WVC54GC
 CVE-2008-4390 (The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 ...)
-	TODO: check
+	NOT-FOR-US: Cisco Linksys WVC54GC
 CVE-2008-4389
 	RESERVED
 CVE-2008-4388
@@ -2642,41 +2642,41 @@
 CVE-2008-4270
 	RESERVED
 CVE-2008-4269 (The search-ms protocol handler in Windows Explorer in Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows Explorer
 CVE-2008-4268 (The Windows Search component in Microsoft Windows Vista Gold and SP1 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Excel
 CVE-2008-4267
 	RESERVED
 CVE-2008-4266 (Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Excel
 CVE-2008-4265 (Microsoft Office Excel 2000 SP3 allows remote attackers to execute ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Excel
 CVE-2008-4264 (Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Excel
 CVE-2008-4263
 	RESERVED
 CVE-2008-4262
 	RESERVED
 CVE-2008-4261 (Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2008-4260 (Microsoft Internet Explorer 7 sometimes attempts to access a deleted ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2008-4259 (Microsoft Internet Explorer 7 sometimes attempts to access ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2008-4258 (Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2008-4257
 	RESERVED
 CVE-2008-4256 (The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Visual Basic
 CVE-2008-4255 (The Windows Common ActiveX control in Microsoft Visual Basic 6.0, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Visual Basic
 CVE-2008-4254 (The Hierarchical FlexGrid ActiveX control in Microsoft Visual Basic ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Visual Basic
 CVE-2008-4253 (The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Visual Basic
 CVE-2008-4252 (The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Visual Basic
 CVE-2008-4251
 	RESERVED
 CVE-2008-4250 (The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, ...)
@@ -3218,23 +3218,23 @@
 CVE-2008-4033 (Cross-domain vulnerability in Microsoft XML Core Services 3.0 through ...)
 	NOT-FOR-US: Microsoft XML Core
 CVE-2008-4032 (Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4031 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4030 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4029 (Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, ...)
 	NOT-FOR-US: Microsoft XML Core
 CVE-2008-4028 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4027 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4026 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4025 (Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4024 (Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Office Word
 CVE-2008-4023 (Active Directory in Microsoft Windows 2000 SP4 does not properly ...)
 	NOT-FOR-US: Microsoft Windows
 CVE-2008-4022
@@ -4710,7 +4710,7 @@
 CVE-2008-3466 (Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not ...)
 	NOT-FOR-US: Microsoft
 CVE-2008-3465 (Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows 
 CVE-2008-3464 (afd.sys in the Ancillary Function Driver (AFD) component in Microsoft ...)
 	NOT-FOR-US: Microsoft
 CVE-2008-3463
@@ -5764,9 +5764,9 @@
 CVE-2008-3011
 	RESERVED
 CVE-2008-3010 (Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows Media Player
 CVE-2008-3009 (Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows Media Player
 CVE-2008-3008 (Stack-based buffer overflow in the WMEncProfileManager ActiveX control ...)
 	NOT-FOR-US: Microsoft Windows Media Encoder
 CVE-2008-3007 (Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and ...)
@@ -7505,7 +7505,7 @@
 CVE-2008-2250 (The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 ...)
 	NOT-FOR-US: Microsoft
 CVE-2008-2249 (Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft Windows
 CVE-2008-2248 (Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) ...)
 	NOT-FOR-US: Exchange Server
 CVE-2008-2247 (Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) ...)

More information about the Secure-testing-commits mailing list