[Secure-testing-commits] r14521 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-04-18 16:55:52 +0000 (Sun, 18 Apr 2010)
New Revision: 14521

Modified:
   data/CVE/list
Log:
xulrunner pwn2own issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-04-18 15:58:32 UTC (rev 14520)
+++ data/CVE/list	2010-04-18 16:55:52 UTC (rev 14521)
@@ -874,7 +874,9 @@
 	NOTE: text says that the problem is similar to that, but affecting firefox 3.5
 	TODO: check 
 CVE-2010-1121 (Unspecified vulnerability in Mozilla Firefox 3 on Windows 7 allows ...)
-	TODO: check xulrunner once details are disclosed
+	- xulrunner <not-affected> (vulnerable code introduced in firefox 3.6)
+	- iceape <not-affected> (vulnerable code introduced in firefox 3.6)
+	TODO: recheck once versions based on firefox 3.6 enter unstable
 CVE-2010-1120 (Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows ...)
 	NOT-FOR-US: Apple Type Services
 CVE-2010-1119 (Unspecified vulnerability in Safari on Apple iPhone OS allows remote ...)