[Secure-testing-commits] r12040 - data/CVE

[Joey Hess]

Author: joeyh
Date: 2009-06-03 21:14:13 +0000 (Wed, 03 Jun 2009)
New Revision: 12040

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-06-03 20:34:15 UTC (rev 12039)
+++ data/CVE/list	2009-06-03 21:14:13 UTC (rev 12040)
@@ -1,3 +1,39 @@
+CVE-2009-1897
+	RESERVED
+CVE-2009-1896
+	RESERVED
+CVE-2009-1895
+	RESERVED
+CVE-2009-1894
+	RESERVED
+CVE-2009-1893
+	RESERVED
+CVE-2009-1892
+	RESERVED
+CVE-2009-1891
+	RESERVED
+CVE-2009-1890
+	RESERVED
+CVE-2009-1889
+	RESERVED
+CVE-2009-1888
+	RESERVED
+CVE-2009-1887
+	RESERVED
+CVE-2009-1886
+	RESERVED
+CVE-2009-1885
+	RESERVED
+CVE-2009-1884
+	RESERVED
+CVE-2009-1883
+	RESERVED
+CVE-2009-1882 (Integer overflow in the XMakeImage function in magick/xwindow.c in ...)
+	TODO: check
+CVE-2009-1881 (Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows ...)
+	TODO: check
+CVE-2009-1880 (Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows ...)
+	TODO: check
 CVE-2009-XXXX [OCS Inventory NG SQL Injection Vulnerability]
 	- ocsinventory-server 1.02.1-1 (medium; bug #531735)
 CVE-2009-3870
@@ -2963,22 +2999,22 @@
 	RESERVED
 CVE-2009-0958
 	RESERVED
-CVE-2009-0957
-	RESERVED
-CVE-2009-0956
-	RESERVED
-CVE-2009-0955
-	RESERVED
-CVE-2009-0954
-	RESERVED
-CVE-2009-0953
-	RESERVED
-CVE-2009-0952
-	RESERVED
-CVE-2009-0951
-	RESERVED
-CVE-2009-0950
-	RESERVED
+CVE-2009-0957 (Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows ...)
+	TODO: check
+CVE-2009-0956 (Apple QuickTime before 7.6.2 does not properly initialize memory ...)
+	TODO: check
+CVE-2009-0955 (Apple QuickTime before 7.6.2 allows remote attackers to execute ...)
+	TODO: check
+CVE-2009-0954 (Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows ...)
+	TODO: check
+CVE-2009-0953 (Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows ...)
+	TODO: check
+CVE-2009-0952 (Buffer overflow in Apple QuickTime before 7.6.2 allows remote ...)
+	TODO: check
+CVE-2009-0951 (Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows ...)
+	TODO: check
+CVE-2009-0950 (Stack-based buffer overflow in Apple iTunes before 8.2 allows remote ...)
+	TODO: check
 CVE-2009-0949
 	RESERVED
 	{DSA-1811-1}
@@ -3138,10 +3174,10 @@
 	RESERVED
 CVE-2009-0895
 	RESERVED
-CVE-2009-0894
-	RESERVED
-CVE-2009-0893
-	RESERVED
+CVE-2009-0894 (Heap-based buffer overflow in the decoder_create function in the ...)
+	TODO: check
+CVE-2009-0893 (Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the ...)
+	TODO: check
 CVE-2009-0892 (The administrative console in IBM WebSphere Application Server (WAS) ...)
 	NOT-FOR-US: IBM WebSphere
 CVE-2009-0891 (The Web Services Security component in IBM WebSphere Application ...)
@@ -6035,15 +6071,15 @@
 	RESERVED
 CVE-2009-0189
 	RESERVED
-CVE-2009-0188
-	RESERVED
+CVE-2009-0188 (Apple QuickTime before 7.6.2 allows remote attackers to execute ...)
+	TODO: check
 CVE-2009-0187 (Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and ...)
 	NOT-FOR-US: Orbit Downloader
 CVE-2009-0186 (Integer overflow in libsndfile 1.0.18, as used in Winamp and other ...)
 	{DSA-1742-1}
 	- libsndfile 1.0.19-1 (medium)
-CVE-2009-0185
-	RESERVED
+CVE-2009-0185 (Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows ...)
+	TODO: check
 CVE-2009-0184 (Multiple buffer overflows in the torrent parsing implementation in ...)
 	NOT-FOR-US: Free Download Manager
 CVE-2009-0183 (Stack-based buffer overflow in Remote Control Server in Free Download ...)