[Secure-testing-commits] r26477 - data/CVE

[Yves-Alexis Perez]

Author: corsac
Date: 2014-04-09 07:08:21 +0000 (Wed, 09 Apr 2014)
New Revision: 26477

Modified:
   data/CVE/list
Log:
External check: add more NFUs for Adobe Flash Player


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-04-09 06:53:18 UTC (rev 26476)
+++ data/CVE/list	2014-04-09 07:08:21 UTC (rev 26477)
@@ -5282,12 +5282,12 @@
 	NOT-FOR-US: Adobe Reader
 CVE-2014-0510 (Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows ...)
 	NOT-FOR-US: Flash plugin
-CVE-2014-0509
-	RESERVED
-CVE-2014-0508
-	RESERVED
-CVE-2014-0507
-	RESERVED
+CVE-2014-0509 [Adobe Flash Player cross site scripting vulnerability]
+	NOT-FOR-US: Adobe Flash Player
+CVE-2014-0508 [Adobe Flash Player information disclosure]
+	NOT-FOR-US: Adobe Flash Player
+CVE-2014-0507 [Adobe Flash Player buffer overflow vulnerability that could result in arbitrary code execution]
+	NOT-FOR-US: Adobe Flash Player
 CVE-2014-0506 (Use-after-free vulnerability in Adobe Flash Player 12.0.0.77 on ...)
 	NOT-FOR-US: Adobe Flash Player
 CVE-2014-0505 (Adobe Shockwave Player before 12.1.0.150 allows remote attackers to ...)