[Secure-testing-commits] r25036 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-01-03 20:31:16 +0000 (Fri, 03 Jan 2014)
New Revision: 25036

Modified:
   data/CVE/list
Log:
CVE-2013-6283

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-01-03 19:00:20 UTC (rev 25035)
+++ data/CVE/list	2014-01-03 20:31:16 UTC (rev 25036)
@@ -3709,8 +3709,10 @@
 CVE-2013-6284 (Unspecified vulnerability in the Statutory Reporting for Insurance ...)
 	NOT-FOR-US: Financial Services module for SAP ERP Central Component
 CVE-2013-6283 (VideoLAN VLC Media Player 2.0.8 and earlier allows remote attackers to ...)
-	- vlc <unfixed>
-	TODO: check, seems not to affect 2.1.0-2
+	- vlc 2.1.0-2
+	[wheezy] - vlc <unfixed> (medium)
+	NOTE: User-assisted DoS for X session (freezes window manager) in 2.0.3-5
+	NOTE: Potential code execution
 CVE-2013-6282 (The (1) get_user and (2) put_user API functions in the Linux kernel ...)
 	- linux 3.6.4-1~experimental.1
 	- linux-2.6 <removed>