[Secure-testing-commits] r12716 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-08-31 00:14:05 +0000 (Mon, 31 Aug 2009)
New Revision: 12716

Modified:
   data/CVE/list
Log:
xine-lib not affected by vlc issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-08-31 00:04:22 UTC (rev 12715)
+++ data/CVE/list	2009-08-31 00:14:05 UTC (rev 12716)
@@ -1326,8 +1326,7 @@
 CVE-2009-XXXX [VLC: integer underflow in Real RTSP]
 	- vlc 1.0.1-1
 	- mplayer <unfixed>
-	- xine-lib <unfixed>
-	NOTE: affected mplayer code copy present in xine-lib
+	- xine-lib <not-affected> (immune due to additional check in xio_rw_abbort())
 	NOTE: Posting on full-disclosure contains details
 CVE-2009-2655 (mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 ...)
 	NOT-FOR-US: Microsoft Internet Explorer