[Secure-testing-commits] r9968 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-10-03 17:52:14 +0000 (Fri, 03 Oct 2008)
New Revision: 9968

Modified:
   data/CVE/list
Log:
CVE-2008-4382 non-issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-03 17:28:55 UTC (rev 9967)
+++ data/CVE/list	2008-10-03 17:52:14 UTC (rev 9968)
@@ -25,7 +25,10 @@
 CVE-2008-4383
 	RESERVED
 CVE-2008-4382 (Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of ...)
-	TODO: check
+	- kdebase <unfixed> (unimportant)
+	NOTE: browser dos not treated as security issue. This is the same like CVE-2008-4381
+	NOTE: which will work in every JS browser as the PoC just creates a large string passing
+	NOTE: it to alert and thus eating memory, no security issue.
 CVE-2008-4381 (Microsoft Internet Explorer 7 allows remote attackers to cause a ...)
 	NOT-FOR-US: Microsoft Internet Explorer
 CVE-2008-4380 (The web interface in Samsung DVR SHR2040 allows remote attackers to ...)