[Secure-testing-commits] r26679 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-04-23 11:22:12 +0000 (Wed, 23 Apr 2014)
New Revision: 26679

Modified:
   data/CVE/list
Log:
CVE-2014-2383/php-dompdf, NFU: CVE-2014-2042, CVE-2014-1217

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-04-23 09:14:10 UTC (rev 26678)
+++ data/CVE/list	2014-04-23 11:22:12 UTC (rev 26679)
@@ -1359,8 +1359,10 @@
 	RESERVED
 CVE-2014-2384 (vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player ...)
 	NOT-FOR-US: VMware on Windows
-CVE-2014-2383
+CVE-2014-2383 [dompdf: arbitrary file read]
 	RESERVED
+	- php-dompdf <unfixed>
+	NOTE: https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/
 CVE-2014-2382
 	RESERVED
 CVE-2014-2381
@@ -2238,6 +2240,7 @@
 	NOT-FOR-US: Procentia IntelliPen
 CVE-2014-2042
 	RESERVED
+	NOT-FOR-US: Livetecs Timelive
 CVE-2014-2041
 	RESERVED
 CVE-2014-2040 (Multiple cross-site scripting (XSS) vulnerabilities in the (1) ...)
@@ -4443,6 +4446,7 @@
 	RESERVED
 CVE-2014-1217
 	RESERVED
+	NOT-FOR-US: Livetecs Timelive
 CVE-2014-1216
 	RESERVED
 	NOT-FOR-US: Fitnesse Wiki