[Secure-testing-commits] r42725 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-06-23 06:41:14 +0000 (Thu, 23 Jun 2016)
New Revision: 42725

Modified:
   data/CVE/list
Log:
Add CVE-2016-2372

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-23 06:41:05 UTC (rev 42724)
+++ data/CVE/list	2016-06-23 06:41:14 UTC (rev 42725)
@@ -9870,8 +9870,15 @@
 	RESERVED
 CVE-2016-2373
 	RESERVED
-CVE-2016-2372
+CVE-2016-2372 [MXIT File Transfer Length Memory Disclosure Vulnerability]
 	RESERVED
+	- pidgin <unfixed>
+	NOTE: http://www.talosintel.com/reports/TALOS-2016-0140/
+	NOTE: http://www.pidgin.im/news/security/?id=105
+	NOTE: https://bitbucket.org/pidgin/main/commits/5e3601f8bde4
+	NOTE: https://bitbucket.org/pidgin/main/commits/1c5197a66760
+	NOTE: https://bitbucket.org/pidgin/main/commits/648f667a679c
+	TODO: check
 CVE-2016-2371 [MXIT Extended Profiles Code Execution Vulnerability]
 	RESERVED
 	- pidgin <unfixed>