Secure testing commits - Apr 2009 - r11549 - data/CVE

Author: jmm-guest
Date: 2009-04-03 19:19:17 +0000 (Fri, 03 Apr 2009)
New Revision: 11549

Modified:
   data/CVE/list
Log:
gzip issue already fixed


Modified: data/CVE/list
==================================================================---
data/CVE/list	2009-04-03 15:27:18 UTC (rev 11548)
+++ data/CVE/list	2009-04-03 19:19:17 UTC (rev 11549)
@@ -9,7 +9,8 @@
 CVE-2009-1217 (Off-by-one error in the GpFont::SetData function in gdiplus.dll
in ...)
 	NOT-FOR-US: Windows GDI+
 CVE-2009-1216 (Multiple unspecified vulnerabilities in (1) unlzh.c and (2)
unpack.c ...)
-	TODO: check
+	NOTE: Duplicate of CVE-2006-4335, confirmed by Microsoft. They''re
working on
+        NOTE: getting it rejected
 CVE-2008-6579 (Nortel Communication Server 1000 4.50.x allows remote attackers
to ...)
 	NOT-FOR-US: Nortel Communication Server
 CVE-2008-6578 (Multiple unspecified vulnerabilities in Nortel Communication
Server ...)