[Secure-testing-commits] r52385 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-07 12:09:47 +0000 (Wed, 07 Jun 2017)
New Revision: 52385

Modified:
   data/CVE/list
Log:
Record information for CVE-2017-9472/libytnef

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-07 12:07:27 UTC (rev 52384)
+++ data/CVE/list	2017-06-07 12:09:47 UTC (rev 52385)
@@ -55,7 +55,9 @@
 	NOTE: https://github.com/Yeraze/ytnef/issues/42
 	NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-memory-allocation-failure-in-tneffillmapi-ytnef-c/
 CVE-2017-9472 (In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote ...)
-	TODO: check
+	- libytnef <unfixed>
+	NOTE: https://github.com/Yeraze/ytnef/issues/41
+	NOTE: https://blogs.gentoo.org/ago/2017/05/24/ytnef-heap-based-buffer-overflow-in-swapdword-ytnef-c/
 CVE-2017-9471 (In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote ...)
 	TODO: check
 CVE-2017-9470 (In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote ...)