[Secure-testing-commits] r8096 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-02-07 13:57:51 +0000 (Thu, 07 Feb 2008)
New Revision: 8096

Modified:
   data/CVE/list
Log:
NFUs
new issues: mplayer (CVE-2008-0629, CVE-2008-0630)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-02-07 09:14:13 UTC (rev 8095)
+++ data/CVE/list	2008-02-07 13:57:51 UTC (rev 8096)
@@ -11,19 +11,20 @@
 CVE-2008-0636
 	RESERVED
 CVE-2008-0635 (Unspecified vulnerability in the delivery engine in Openads 2.4.0 ...)
-	TODO: check
+	NOT-FOR-US: Openads
 CVE-2008-0634 (Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in ...)
-	TODO: check
+	NOT-FOR-US: NamoInstaller
 CVE-2008-0633 (Buffer overflow in Anon Proxy Server 0.102 and earlier, when user ...)
-	TODO: check
+	NOT-FOR-US: Anon Proxy Server
+	NOTE: this is not anon-proxy
 CVE-2008-0632 (Unrestricted file upload vulnerability in cp_upload_image.php in ...)
-	TODO: check
+	NOT-FOR-US: LightBlog
 CVE-2008-0631 (Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow ...)
-	TODO: check
+	NOT-FOR-US: MailBee Objects
 CVE-2008-0630 (Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 ...)
-	TODO: check
+	- mplayer <unfixed> (medium; bug #464532)
 CVE-2008-0629 (Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before ...)
-	TODO: check
+	- mplayer <unfixed> (medium; bug #464533)
 CVE-2008-0628 (The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 ...)
 	TODO: check
 CVE-2008-0627