Author: geissert Date: 2010-02-12 04:00:33 +0000 (Fri, 12 Feb 2010) New Revision: 14080 Modified: data/CVE/list Log: NFUs, ffmpeg issues Modified: data/CVE/list ==================================================================--- data/CVE/list 2010-02-12 03:55:32 UTC (rev 14079) +++ data/CVE/list 2010-02-12 04:00:33 UTC (rev 14080) @@ -7,29 +7,49 @@ - linux-2.6 <unfixed> - linux-2.6.24 <removed> CVE-2010-0564 (Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in ...) - TODO: check + NOT-FOR-US: Trend Micro URL Filtering Engine CVE-2009-4640 (Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4639 (The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4638 (Integer overflow in FFmpeg 0.5 allows remote attackers to cause a ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4637 (FFmpeg 0.5 allows remote attackers to cause a denial of service ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4636 (FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4635 (FFmpeg 0.5 allows remote attackers to cause a denial of service and ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4634 (Multiple integer underflows in FFmpeg 0.5 allow remote attackers to ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4633 (vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4632 (oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2009-4631 (Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows ...) + - ffmpeg <unfixed> + - ffmpeg-debian <removed> TODO: check CVE-2010-0563 (The Single Sign-on (SSO) functionality in IBM WebSphere Application ...) - TODO: check + NOT-FOR-US: IBM WebSphere Application CVE-2010-0562 (The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, ...) - fetchmail 6.3.13-2 (low) NOTE: the conditions so that this is exploitable are rather obscure @@ -38,7 +58,7 @@ CVE-2010-0560 (Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, ...) TODO: check CVE-2003-1588 (Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, ...) - TODO: check + NOT-FOR-US: Sun Cluster CVE-2010-0559 (The default configuration of Oracle OpenSolaris snv_91 through snv_131 ...) NOT-FOR-US: Oracle OpenSolaris CVE-2010-0558 (The default configuration of Oracle OpenSolaris snv_77 through snv_131 ...)