[Secure-testing-commits] r4594 - data/CVE

Alec Berryman
Fri, 18 Aug 2006 03:29:12 -0000

Author: alec-guest
Date: 2006-08-18 03:28:39 +0000 (Fri, 18 Aug 2006)
New Revision: 4594

Modified:
   data/CVE/list
Log:
CVE-2006-4192: libmodplug (buffer/heap overflow -> arbitrary code execution

Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-08-18 03:22:39 UTC (rev 4593)
+++ data/CVE/list	2006-08-18 03:28:39 UTC (rev 4594)
@@ -3,7 +3,7 @@
 CVE-2006-4193 (Microsoft Internet Explorer 6.0 SP1 and possibly other versions
allows ...)
 	NOT-FOR-US: MS IE
 CVE-2006-4192 (Multiple buffer overflows in MODPlug Tracker (OpenMPT)
1.17.02.43 and ...)
-	TODO: check
+	- libmodplug <unfixed> (medium; bug filed)
 CVE-2006-4191 (Directory traversal vulnerability in memcp.php in XMB (Extreme
Message ...)
 	NOT-FOR-US: XMB
 CVE-2006-4190 (Directory traversal vulnerability in autohtml.php in the
AutoHTML ...)