[Secure-testing-commits] r46257 - data/CVE

Michael Gilbert mgilbert at moszumanska.debian.org
Thu Nov 17 01:39:04 UTC 2016


Author: mgilbert
Date: 2016-11-17 01:39:04 +0000 (Thu, 17 Nov 2016)
New Revision: 46257

Modified:
   data/CVE/list
Log:
nfus

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-16 21:21:15 UTC (rev 46256)
+++ data/CVE/list	2016-11-17 01:39:04 UTC (rev 46257)
@@ -1887,7 +1887,7 @@
 CVE-2016-8662
 	RESERVED
 CVE-2016-8661 (Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow ...)
-	TODO: check
+	NOT-FOR-US: Little Snitch
 CVE-2016-8657
 	RESERVED
 CVE-2016-8656
@@ -2182,13 +2182,13 @@
 CVE-2016-8584
 	RESERVED
 CVE-2016-8583 (Multiple GET parameters in the vulnerability scan scheduler of ...)
-	TODO: check
+	NOT-FOR-US: AlienVault
 CVE-2016-8582 (A vulnerability exists in gauge.php of AlienVault OSSIM and USM before ...)
-	TODO: check
+	NOT-FOR-US: AlienVault
 CVE-2016-8581 (A persistent XSS vulnerability exists in the User-Agent header of the ...)
-	TODO: check
+	NOT-FOR-US: AlienVault
 CVE-2016-8580 (PHP object injection vulnerabilities exist in multiple widget files in ...)
-	TODO: check
+	NOT-FOR-US: AlienVault
 CVE-2016-8579 (docker2aci <= 0.12.3 has an infinite loop when handling local images ...)
 	- golang-github-appc-docker2aci 0.12.3+dfsg-2 (bug #840711)
 	NOTE: https://github.com/appc/docker2aci/issues/203
@@ -2968,7 +2968,7 @@
 	- mysql-5.6 <not-affected> (Only affects MySQL 5.7)
 	- mysql-5.5 <not-affected> (Only affects MySQL 5.7)
 CVE-2016-8285 (Unspecified vulnerability in the PeopleSoft Enterprise HCM component ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2016-8284 (Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and ...)
 	- mysql-5.7 5.7.15-1
 	- mysql-5.6 5.6.34-1 (bug #841049)
@@ -2985,7 +2985,7 @@
 CVE-2016-8282
 	RESERVED
 CVE-2016-8281 (Unspecified vulnerability in the Oracle Platform Security for Java ...)
-	TODO: check
+	NOT-FOR-US: Oracle
 CVE-2016-1000244
 	RESERVED
 CVE-2016-1000243
@@ -3261,7 +3261,7 @@
 CVE-2016-8204
 	RESERVED
 CVE-2016-8203 (A memory corruption in the IPsec code path of Brocade NetIron OS on ...)
-	TODO: check
+	NOT-FOR-US: Brocade
 CVE-2016-8202
 	RESERVED
 CVE-2016-8201
@@ -4075,7 +4075,7 @@
 CVE-2016-8101 (The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local ...)
 	NOT-FOR-US: Intel SSD Toolbox
 CVE-2016-8100 (Intel Integrated Performance Primitives (aka IPP) Cryptography before ...)
-	TODO: check
+	NOT-FOR-US: Intel
 CVE-2016-8099
 	RESERVED
 CVE-2016-8098
@@ -4460,9 +4460,9 @@
 CVE-2016-7961
 	RESERVED
 CVE-2016-7960 (Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2016-7959 (Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores ...)
-	TODO: check
+	NOT-FOR-US: Siemens
 CVE-2016-7958
 	RESERVED
 CVE-2016-7957
@@ -4764,7 +4764,7 @@
 CVE-2016-7852 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
 	NOT-FOR-US: Adobe
 CVE-2016-7851 (Adobe Connect version 9.5.6 and earlier does not adequately validate ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7850
 	RESERVED
 CVE-2016-7849
@@ -5681,11 +5681,11 @@
 CVE-2016-7438
 	RESERVED
 CVE-2016-7437 (SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the ...)
-	TODO: check
+	NOT-FOR-US: SAP Netweaver
 CVE-2016-7436
 	RESERVED
 CVE-2016-7435 (The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and ...)
-	TODO: check
+	NOT-FOR-US: SAP Netweaver
 CVE-2016-7434
 	RESERVED
 CVE-2016-7433
@@ -5828,7 +5828,7 @@
 CVE-2016-7403
 	RESERVED
 CVE-2016-7402 (SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own ...)
-	TODO: check
+	NOT-FOR-US: SAP ASE
 CVE-2016-7401 (The cookie parsing code in Django before 1.8.15 and 1.9.x before ...)
 	{DSA-3678-1 DLA-649-1}
 	- python-django 1:1.10-1 (low)
@@ -6134,155 +6134,155 @@
 CVE-2016-7257
 	RESERVED
 CVE-2016-7256 (atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7255 (The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7254 (Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7253 (The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7252 (Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7251 (Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7250 (Microsoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7249 (Microsoft SQL Server 2016 does not properly perform a cast of an ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7248 (Microsoft Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7247 (Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7246 (The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7245 (Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7244 (Microsoft Office 2007 SP3 allows remote attackers to cause a denial of ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7243 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7242 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7241 (Microsoft Internet Explorer 11 and Microsoft Edge allow remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7240 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7239 (The RegEx class in the XSS filter in Microsoft Internet Explorer 9 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7238 (Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7237 (Local Security Authority Subsystem Service (LSASS) in Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7236 (Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7235 (Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7234 (Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7233 (Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7232 (Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7231 (Microsoft Excel 2007 SP3, Excel for Mac 2011, Office Compatibility ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7230 (Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7229 (Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7228 (Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7227 (The scripting engines in Microsoft Internet Explorer 9 through 11 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7226 (Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7225 (Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7224 (Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7223 (Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7222 (Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7221 (Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7220 (Virtual Secure Mode in Microsoft Windows 10 allows local users to ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7219
 	RESERVED
 CVE-2016-7218 (Bowser.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7217 (Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7216 (The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7215 (The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7214 (The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7213 (Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7212 (Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7211 (The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7210 (atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7209 (Microsoft Edge allows remote attackers to spoof web content via a ...)
-	TODO: check
+	NOT-FOR-US: Mircosoft
 CVE-2016-7208 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7207
 	RESERVED
 CVE-2016-7206
 	RESERVED
 CVE-2016-7205 (Animation Manager in Microsoft Windows Server 2008 R2 SP1, Windows 7 ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7204 (Microsoft Edge allows remote attackers to access arbitrary "My ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7203 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7202 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7201 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7200 (The Chakra JavaScript scripting engine in Microsoft Edge allows remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7199 (Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7198 (Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7197
 	RESERVED
 CVE-2016-7196 (Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7195 (Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7194 (The Chakra JavaScript engine in Microsoft Edge allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7193 (Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7192
 	RESERVED
 CVE-2016-7191 (The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) ...)
 	NOT-FOR-US: Microsoft Azure Active Directory Passport
 CVE-2016-7190 (The Chakra JavaScript engine in Microsoft Edge allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7189 (The Chakra JavaScript engine in Microsoft Edge allows remote attackers ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7188 (The Standard Collector Service in Windows Diagnostics Hub in Microsoft ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7187
 	RESERVED
 CVE-2016-7186
 	RESERVED
 CVE-2016-7185 (The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7184 (The Common Log File System (CLFS) driver in Microsoft Windows Vista ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7183
 	RESERVED
 CVE-2016-7182 (The Graphics component in Microsoft Windows Vista SP2; Windows Server ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7181
 	RESERVED
 CVE-2016-7393 [stack-based buffer overflow in aac_sync (aac_parser.c)]
@@ -6423,7 +6423,7 @@
 	NOTE: Affected versions: libcurl 7.11.1 to and including 7.50.2
 	NOTE: Not affected versions: libcurl < 7.11.1 and libcurl >= 7.50.3
 CVE-2016-7165 (Unquoted Windows search path vulnerability in Siemens SIMATIC WinCC ...)
-	TODO: check
+	NOT-FOR-US: Microsoft
 CVE-2016-7162 (The _g_file_remove_directory function in file-utils.c in File Roller ...)
 	- file-roller 3.20.3-1
 	[jessie] - file-roller <no-dsa> (Minor issue)
@@ -6784,7 +6784,7 @@
 CVE-2016-7096
 	RESERVED
 CVE-2016-7095 (Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a ...)
-	TODO: check
+	NOT-FOR-US: Exponent CMS
 CVE-2016-7111
 	RESERVED
 	- mantis <not-affected> (Vulnerable code introduced in 1.3.0-rc.2)
@@ -7049,59 +7049,59 @@
 CVE-2016-7020 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 ...)
 	NOT-FOR-US: Adobe Flash Player
 CVE-2016-7019 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7018 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7017 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7016 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7015 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7014 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7013 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7012 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7011 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7010 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7009 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7008 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7007 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7006 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7005 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7004 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7003 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7002 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7001 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-7000 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6999 (Integer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6998 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6997 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6996 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6995 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6994 (Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6993 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6992 (Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before ...)
 	NOT-FOR-US: Adobe
 CVE-2016-6991
@@ -7111,7 +7111,7 @@
 CVE-2016-6989 (Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before ...)
 	NOT-FOR-US: Adobe
 CVE-2016-6988 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6987 (Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 ...)
 	NOT-FOR-US: Adobe
 CVE-2016-6986 (Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before ...)
@@ -7129,87 +7129,87 @@
 CVE-2016-6980 (Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 ...)
 	NOT-FOR-US: Adobe
 CVE-2016-6979 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6978 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6977 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6976 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6975 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6974 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6973 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6972 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6971 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6970 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6969 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6968 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6967 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6966 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6965 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6964 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6963 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6962 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6961 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6960 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6959 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6958 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6957 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6956 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6955 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6954 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6953 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6952 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6951 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6950 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6949 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6948 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6947 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6946 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6945 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6944 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6943 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6942 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6941 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6940 (Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6939 (Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6938 (Use-after-free vulnerability in Adobe Reader and Acrobat before ...)
 	NOT-FOR-US: Adobe
 CVE-2016-6937 (Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC ...)
@@ -7217,7 +7217,7 @@
 CVE-2016-6936 (Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support ...)
 	NOT-FOR-US: Adobe
 CVE-2016-6935 (Unquoted Windows search path vulnerability in Adobe Creative Cloud ...)
-	TODO: check
+	NOT-FOR-US: Adobe
 CVE-2016-6934
 	RESERVED
 CVE-2016-6933




More information about the Secure-testing-commits mailing list