[Secure-testing-commits] r12825 - data/CVE

[Giuseppe Iuculano]

Author: derevko-guest
Date: 2009-09-16 12:23:21 +0000 (Wed, 16 Sep 2009)
New Revision: 12825

Modified:
   data/CVE/list
Log:
- NFUs
- CVE-2008-7228: Multiple format string vulnerabilities in whitedune


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-09-15 21:44:23 UTC (rev 12824)
+++ data/CVE/list	2009-09-16 12:23:21 UTC (rev 12825)
@@ -1,5 +1,5 @@
 CVE-2008-7228 (Multiple format string vulnerabilities in White_Dune before ...)
-	TODO: check
+	- whitedune <unfixed> (bug #546903)
 CVE-2008-7224 (Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows ...)
 	TODO: check
 CVE-2009-3183 (Heap-based buffer overflow in w in Sun Solaris 8 through 10, and ...)
@@ -1368,7 +1368,7 @@
 CVE-2009-2810
 	RESERVED
 CVE-2009-2809 (ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: ImageIO in Apple Mac OS X
 CVE-2009-2808
 	RESERVED
 CVE-2009-2807 (Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS ...)
@@ -1376,7 +1376,7 @@
 CVE-2009-2806
 	RESERVED
 CVE-2009-2805 (Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 ...)
-	TODO: check
+	NOT-FOR-US: CoreGraphics in Apple Mac OS X
 CVE-2009-2804 (Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8 ...)
 	NOT-FOR-US: Apple Mac OS X
 CVE-2009-2803 (CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to ...)