[Secure-testing-commits] r14785 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2010-06-02 21:43:28 +0000 (Wed, 02 Jun 2010)
New Revision: 14785

Modified:
   data/CVE/list
Log:
new chrome issue
xulrunner unimportant
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-06-02 21:15:30 UTC (rev 14784)
+++ data/CVE/list	2010-06-02 21:43:28 UTC (rev 14785)
@@ -17,13 +17,13 @@
 CVE-2010-2121 (Opera 9.52 allows remote attackers to cause a denial of service ...)
 	TODO: check
 CVE-2010-2120 (Google Chrome 1.0.154.48 allows remote attackers to cause a denial of ...)
-	TODO: check
+	- chromium-browser <undetermined>
 CVE-2010-2119 (Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: MS IE
 CVE-2010-2118 (Microsoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows ...)
-	TODO: check
+	NOT-FOR-US: MS IE
 CVE-2010-2117 (Mozilla Firefox 3.0.19, 3.5.x, and 3.6.x allows remote attackers to ...)
-	TODO: check
+	- xulrunner <unfixed> (unimportant)
 CVE-2009-4881 (Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in ...)
 	TODO: check
 CVE-2009-4880 (Multiple integer overflows in the strfmon implementation in the GNU C ...)
@@ -1184,7 +1184,6 @@
 CVE-2010-1620 (Integer overflow in the load_iface function in Tools/gdomap.c in ...)
 	- gnustep-base <unfixed>
 	[lenny] - gnustep-base <no-dsa> (Minor issue)
-	TODO: File bug
 CVE-2010-1612 (The IBM WebSphere DataPower XML Accelerator XA35, Low Latency ...)
 	NOT-FOR-US: IBM WebSphere DataPower XML Accelerator
 CVE-2010-1611 (Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 ...)