[Secure-testing-commits] r37334 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-10-25 19:53:05 +0000 (Sun, 25 Oct 2015)
New Revision: 37334

Modified:
   data/CVE/list
Log:
Mark some NFUs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-10-25 19:23:36 UTC (rev 37333)
+++ data/CVE/list	2015-10-25 19:53:05 UTC (rev 37334)
@@ -596,11 +596,11 @@
 CVE-2015-7719
 	RESERVED
 CVE-2015-7718 (mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before ...)
-	TODO: check
+	NOT-FOR-US: mediaserver in Android
 CVE-2015-7717 (mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before ...)
-	TODO: check
+	NOT-FOR-US: mediaserver in Android
 CVE-2015-7716 (libstagefright in Android 5.x before 5.1.1 LMY48T allows remote ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-7715
 	RESERVED
 CVE-2015-7714
@@ -3287,25 +3287,25 @@
 CVE-2015-6606 (The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin ...)
 	TODO: check
 CVE-2015-6605 (mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: mediaserver in Android
 CVE-2015-6604 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-6603 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-6602 (libutils in Android through 5.1.1 LMY48M allows remote attackers to ...)
 	NOT-FOR-US: libutils in Android
 CVE-2015-6601 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-6600 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-6599 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-6598 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-6597
 	RESERVED
 CVE-2015-6596 (mediaserver in Android before 5.1.1 LMY48T allows attackers to gain ...)
-	TODO: check
+	NOT-FOR-US: mediaserver in Android
 CVE-2015-6595
 	RESERVED
 CVE-2015-6594
@@ -10602,17 +10602,17 @@
 CVE-2015-3881
 	RESERVED
 CVE-2015-3879 (Media Player Framework in Android before 5.1.1 LMY48T allows attackers ...)
-	TODO: check
+	NOT-FOR-US: Media Player Framework in Android
 CVE-2015-3878 (Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before ...)
-	TODO: check
+	NOT-FOR-US: Media Projection in Android
 CVE-2015-3877 (Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Skia, as used in Android
 CVE-2015-3876 (libstagefright in Android through 5.1.1 LMY48M allows remote attackers ...)
 	NOT-FOR-US: libstagefright in Android
 CVE-2015-3875 (libutils in Android before 5.1.1 LMY48T allows remote attackers to ...)
-	TODO: check
+	NOT-FOR-US: libutils in Android
 CVE-2015-3874 (The Sonivox components in Android before 5.1.1 LMY48T allow remote ...)
-	TODO: check
+	NOT-FOR-US: The Sonivox components in Android
 CVE-2015-3873 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
 	NOT-FOR-US: libstagefright in Android
 CVE-2015-3872 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
@@ -10630,13 +10630,13 @@
 CVE-2015-3866
 	RESERVED
 CVE-2015-3865 (The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers ...)
-	TODO: check
+	NOT-FOR-US: The Runtime subsystem in Android
 CVE-2015-3864 (Integer underflow in the MPEG4Extractor::parseChunk function in ...)
 	NOT-FOR-US: libstagefright in mediaserver in Android
 CVE-2015-3863 (Multiple integer overflows in the Blob class in keystore/keystore.cpp ...)
 	NOT-FOR-US: Keystore in Android
 CVE-2015-3862 (mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a ...)
-	TODO: check
+	NOT-FOR-US: mediaserver in Android
 CVE-2015-3861 (Multiple integer overflows in the addVorbisCodecInfo function in ...)
 	NOT-FOR-US: libstagefright in mediaserver in Android
 CVE-2015-3860 (packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen ...)
@@ -10666,7 +10666,7 @@
 CVE-2015-3848
 	RESERVED
 CVE-2015-3847 (Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove ...)
-	TODO: check
+	NOT-FOR-US: Bluetooth in Android
 CVE-2015-3846
 	RESERVED
 CVE-2015-3845 (The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in ...)
@@ -10714,7 +10714,7 @@
 CVE-2015-3824 (The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in ...)
 	NOT-FOR-US: libstagefright in Android
 CVE-2015-3823 (libstagefright in Android before 5.1.1 LMY48T allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: libstagefright in Android
 CVE-2015-3822
 	RESERVED
 CVE-2015-3821