Author: helmut-guest
Date: 2012-06-19 07:27:50 +0000 (Tue, 19 Jun 2012)
New Revision: 19533
Modified:
data/CVE/list
Log:
marked chromium-browser PDF issues as not-affected
NFUs, rssowl <itp>, serendipity <undetermined>, chromium-browser
<undetermined>
Modified: data/CVE/list
==================================================================---
data/CVE/list 2012-06-19 04:46:01 UTC (rev 19532)
+++ data/CVE/list 2012-06-19 07:27:50 UTC (rev 19533)
@@ -582,7 +582,8 @@
{DSA-2495-1}
- openconnect 3.18-1 (bug #677594)
CVE-2012-3290 (Multiple unspecified vulnerabilities in Google Chrome before
...)
- TODO: check
+ - chromium-browser <undetermined>
+ NOTE: Seems to be device-specific.
CVE-2012-3289 (VMware Workstation 8.x before 8.0.4, VMware Player 4.x before
4.0.4, ...)
TODO: check
CVE-2012-3288 (VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware
...)
@@ -1665,7 +1666,7 @@
NOTE:
http://www.reactionpenetrationtesting.co.uk/advisories/scriptfu-buffer-overflow-GIMP-2.6.html
NOTE: http://www.reactionpenetrationtesting.co.uk/advisories/scriptfubof.c
CVE-2012-2762 (SQL injection vulnerability in
include/functions_trackbacks.inc.php in ...)
- TODO: check
+ - serendipity <undetermined>
CVE-2012-2761
RESERVED
CVE-2012-2760
@@ -1995,7 +1996,7 @@
CVE-2012-2631 (Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB
ShoppingCart ...)
TODO: check
CVE-2012-2630 (The Puella Magi Madoka Magica iP application 1.05 and earlier
for ...)
- TODO: check
+ NOT-FOR-US: Puella Magi Madoka Magica iP (Android application)
CVE-2012-2629
RESERVED
CVE-2012-2628
@@ -5360,17 +5361,17 @@
CVE-2012-1256 (The single sign-on (SSO) implementation in EasyVista before ...)
NOT-FOR-US: EasyVista
CVE-2012-1255 (SQL injection vulnerability in Segue 2.2.10.2 and earlier allows
...)
- TODO: check
+ NOT-FOR-US: Segue (CMS)
CVE-2012-1254 (Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and
earlier ...)
- TODO: check
+ NOT-FOR-US: Segue (CMS)
CVE-2012-1253 (Cross-site scripting (XSS) vulnerability in Roundcube Webmail
before ...)
- roundcube 0.7-1
CVE-2012-1252 (Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1
allows ...)
- TODO: check
+ - rssowl <itp> (bug #346541)
CVE-2012-1251 (Opera before 9.63 does not properly verify X.509 certificates
from SSL ...)
- TODO: check
+ NOT-FOR-US: Opera
CVE-2012-1250 (Logitec LAN-W300N/R routers with firmware before 2.27 do not
properly ...)
- TODO: check
+ NOT-FOR-US: Logitec LAN-W300N/R device
CVE-2012-1249 (The iLunascape application 1.0.4.0 and earlier for Android does
not ...)
NOT-FOR-US: iLunascape
CVE-2012-1248 (app/config/core.php in baserCMS 1.6.15 and earlier does not
properly ...)
@@ -6092,7 +6093,7 @@
CVE-2012-0986
RESERVED
CVE-2012-0985 (Multiple buffer overflows in the Wireless Manager ActiveX
control ...)
- TODO: check
+ NOT-FOR-US: Sony VAIO wireless LAN management ActiveX
CVE-2012-0984
RESERVED
CVE-2012-0983 (SQL injection vulnerability in Scriptsez.net Ez Album allows
remote ...)
@@ -14483,15 +14484,15 @@
CVE-2011-3115 (Google V8, as used in Google Chrome before 19.0.1084.52, allows
remote ...)
- libv8 <unfixed>
CVE-2011-3114 (Multiple buffer overflows in the PDF functionality in Google
Chrome ...)
- - chromium-browser <unfixed>
+ - chromium-browser <not-affected> (PDF functionality not built)
CVE-2011-3113 (The PDF functionality in Google Chrome before 19.0.1084.52 does
not ...)
- - chromium-browser <unfixed>
+ - chromium-browser <not-affected> (PDF functionality not built)
CVE-2011-3112 (Use-after-free vulnerability in the PDF functionality in Google
Chrome ...)
- chromium-browser <not-affected> (PDF functionality specific to Chrome)
CVE-2011-3111 (Google V8, as used in Google Chrome before 19.0.1084.52, allows
remote ...)
- libv8 <unfixed>
CVE-2011-3110 (The PDF functionality in Google Chrome before 19.0.1084.52
allows ...)
- - chromium-browser <unfixed>
+ - chromium-browser <not-affected> (PDF functionality not built)
CVE-2011-3109 (Google Chrome before 19.0.1084.52 on Linux does not properly
perform a ...)
- chromium-browser <unfixed>
CVE-2011-3108 (Use-after-free vulnerability in Google Chrome before
19.0.1084.52 ...)
@@ -14519,7 +14520,7 @@
CVE-2011-3098 (Google Chrome before 19.0.1084.46 on Windows uses an incorrect
search ...)
- chromium-browser <not-affected> (Windows-specific)
CVE-2011-3097 (The PDF functionality in Google Chrome before 19.0.1084.46
allows ...)
- - chromium-browser <unfixed>
+ - chromium-browser <not-affected> (PDF functionality not built)
CVE-2011-3096 (Use-after-free vulnerability in Google Chrome before
19.0.1084.46 on ...)
- chromium-browser <unfixed>
CVE-2011-3095 (The OGG container in Google Chrome before 19.0.1084.46 allows
remote ...)
@@ -14705,7 +14706,7 @@
- chromium-browser 17.0.963.56~r121963-1
- webkit <undetermined>
CVE-2011-3015 (Multiple integer overflows in the PDF codecs in Google Chrome
before ...)
- - chromium-browser <unfixed>
+ - chromium-browser <not-affected> (PDF functionality not built)
- webkit <undetermined>
CVE-2011-3014 (The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x
through ...)
NOT-FOR-US: Novell Data Synchronizer