[Secure-testing-commits] r20220 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-09-24 16:38:11 +0000 (Mon, 24 Sep 2012)
New Revision: 20220

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-09-24 07:31:08 UTC (rev 20219)
+++ data/CVE/list	2012-09-24 16:38:11 UTC (rev 20220)
@@ -1,5 +1,5 @@
 CVE-2012-5007 (The Fill PDF module 7.x-1.x before 7.x-1.2 for Drupal allows remote ...)
-	TODO: check
+	NOT-FOR-US: Drupal addon Fill PDF
 CVE-2012-5006 (Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser ...)
 	NOT-FOR-US: Caminova DjVu Browser
 CVE-2012-5005 (Cross-site request forgery (CSRF) vulnerability in ...)
@@ -7,7 +7,7 @@
 CVE-2012-5004 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...)
 	NOT-FOR-US: Parallels H-Sphere
 CVE-2012-5003 (nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not ...)
-	TODO: check
+	NOT-FOR-US: No Machine NX Web Companion
 CVE-2012-5002 (Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in ...)
 	NOT-FOR-US: SR10 FTP server in Ricoh DC Software
 CVE-2012-5001 (Multiple unspecified vulnerabilities in Hitachi JP1/Cm2/Network Node ...)
@@ -3263,9 +3263,9 @@
 CVE-2012-3748
 	RESERVED
 CVE-2012-3747 (WebKit, as used in Apple iOS before 6, allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: Webkit / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3746 (UIWebView in UIKit in Apple iOS before 6 does not properly use the ...)
-	TODO: check
+	NOT-FOR-US: Webkit / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3745 (Off-by-one error in Telephony in Apple iOS before 6 allows remote ...)
 	NOT-FOR-US: Telephony in Apple iOS
 CVE-2012-3744 (Telephony in Apple iOS before 6 uses an SMS message's return address ...)
@@ -3273,7 +3273,7 @@
 CVE-2012-3743 (The System Logs implementation in Apple iOS before 6 does not restrict ...)
 	NOT-FOR-US: Apple iOS
 CVE-2012-3742 (Safari in Apple iOS before 6 does not properly restrict use of an ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3741 (The Restrictions (aka Parental Controls) implementation in Apple iOS ...)
 	NOT-FOR-US: Apple iOS
 CVE-2012-3740 (The Passcode Lock implementation in Apple iOS before 6 does not ...)
@@ -3327,11 +3327,11 @@
 CVE-2012-3716 (CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote ...)
 	NOT-FOR-US: Apple Mac OS X
 CVE-2012-3715 (Apple Safari before 6.0.1 makes http requests for https URIs in ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3714 (The Form Autofill feature in Apple Safari before 6.0.1 does not ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3713 (Apple Safari before 6.0.1 does not properly handle the Quarantine ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3712 (WebKit, as used in Apple iTunes before 10.7, allows remote attackers ...)
 	NOT-FOR-US: Apple iTunes / if anything of this affects Chromium, the Chrome sec team will know and fix
 CVE-2012-3711 (WebKit, as used in Apple iTunes before 10.7, allows remote attackers ...)