Author: joeyh
Date: 2011-11-09 21:15:01 +0000 (Wed, 09 Nov 2011)
New Revision: 17578
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2011-11-09 17:12:59 UTC (rev 17577)
+++ data/CVE/list 2011-11-09 21:15:01 UTC (rev 17578)
@@ -1333,8 +1333,8 @@
RESERVED
CVE-2011-4001
RESERVED
-CVE-2011-4000
- RESERVED
+CVE-2011-4000 (Buffer overflow in ChaSen 2.4.x allows remote attackers to
execute ...)
+ TODO: check
CVE-2011-3999
RESERVED
CVE-2011-3998
@@ -2125,39 +2125,34 @@
RESERVED
CVE-2011-3656
RESERVED
-CVE-2011-3655
- RESERVED
+CVE-2011-3655 (Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0
...)
- xulrunner <not-affected> (Only affects Firefox >= 4)
- iceweasel 8.0-1
[lenny] - iceweasel <not-affected> (Only affects Firefox >= 4)
[squeeze] - iceweasel <not-affected> (Only affects Firefox >= 4)
- iceape <not-affected> (Only affects Firefox >= 4)
-CVE-2011-3654
- RESERVED
+CVE-2011-3654 (The browser engine in Mozilla Firefox before 8.0 and Thunderbird
...)
- xulrunner <not-affected> (Only affects Firefox >= 4)
- iceweasel 8.0-1
[lenny] - iceweasel <not-affected> (Only affects Firefox >= 4)
[squeeze] - iceweasel <not-affected> (Only affects Firefox >= 4)
- iceape <not-affected> (Only affects Firefox >= 4)
-CVE-2011-3653
- RESERVED
+CVE-2011-3653 (Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS
X do ...)
- iceweasel <not-affected> (MacOS X-specific)
-CVE-2011-3652
- RESERVED
+CVE-2011-3652 (The browser engine in Mozilla Firefox before 8.0 and Thunderbird
...)
- xulrunner <not-affected> (Only affects Firefox >= 4)
- iceweasel 8.0-1
[lenny] - iceweasel <not-affected> (Only affects Firefox >= 4)
[squeeze] - iceweasel <not-affected> (Only affects Firefox >= 4)
- iceape <not-affected> (Only affects Firefox >= 4)
-CVE-2011-3651
- RESERVED
+CVE-2011-3651 (Multiple unspecified vulnerabilities in the browser engine in
Mozilla ...)
- xulrunner <not-affected> (Only affects Firefox >= 4)
- iceweasel 8.0-1
[lenny] - iceweasel <not-affected> (Only affects Firefox >= 4)
[squeeze] - iceweasel <not-affected> (Only affects Firefox >= 4)
- iceape <not-affected> (Only affects Firefox >= 4)
-CVE-2011-3650
- RESERVED
+CVE-2011-3650 (Mozilla Firefox before 3.6.24 and 4.x through 7.0 and
Thunderbird ...)
+ {DSA-2342-1 DSA-2341-1}
- icedove 3.1.15-1
[lenny] - icedove <end-of-life>
- xulrunner <removed>
@@ -2165,11 +2160,10 @@
[lenny] - iceweasel <not-affected> (Lenny''s iceweasel uses
Xulrunner from the xulrunner source pkg)
- iceape 2.0.14-9
[lenny] - iceape <not-affected> (Only a stub package)
-CVE-2011-3649
- RESERVED
+CVE-2011-3649 (Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka
D2D) ...)
- iceweasel <not-affected> (Windows-specific)
-CVE-2011-3648
- RESERVED
+CVE-2011-3648 (Cross-site scripting (XSS) vulnerability in Mozilla Firefox
before ...)
+ {DSA-2342-1 DSA-2341-1}
- icedove 3.1.15-1
[lenny] - icedove <end-of-life>
- xulrunner <removed>
@@ -2177,8 +2171,8 @@
[lenny] - iceweasel <not-affected> (Lenny''s iceweasel uses
Xulrunner from the xulrunner source pkg)
- iceape 2.0.14-9
[lenny] - iceape <not-affected> (Only a stub package)
-CVE-2011-3647
- RESERVED
+CVE-2011-3647 (The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and
Thunderbird ...)
+ {DSA-2342-1 DSA-2341-1}
- icedove 3.1.15-1
[lenny] - icedove <end-of-life>
- xulrunner <removed>
@@ -5612,14 +5606,14 @@
RESERVED
CVE-2011-2450
RESERVED
-CVE-2011-2449
- RESERVED
-CVE-2011-2448
- RESERVED
-CVE-2011-2447
- RESERVED
-CVE-2011-2446
- RESERVED
+CVE-2011-2449 (The TextXtra module in Adobe Shockwave Player before 11.6.3.633
allows ...)
+ TODO: check
+CVE-2011-2448 (The DIRapi library in Adobe Shockwave Player before 11.6.3.633
allows ...)
+ TODO: check
+CVE-2011-2447 (Adobe Shockwave Player before 11.6.3.633 allows attackers to
execute ...)
+ TODO: check
+CVE-2011-2446 (The DIRapi library in Adobe Shockwave Player before 11.6.3.633
allows ...)
+ TODO: check
CVE-2011-2445
RESERVED
CVE-2011-2444 (Cross-site scripting (XSS) vulnerability in Adobe Flash Player
before ...)
@@ -6783,14 +6777,14 @@
RESERVED
CVE-2011-2017
RESERVED
-CVE-2011-2016
- RESERVED
+CVE-2011-2016 (Untrusted search path vulnerability in Windows Mail and Windows
...)
+ TODO: check
CVE-2011-2015
RESERVED
-CVE-2011-2014
- RESERVED
-CVE-2011-2013
- RESERVED
+CVE-2011-2014 (The LDAP over SSL (aka LDAPS) implementation in Active
Directory, ...)
+ TODO: check
+CVE-2011-2013 (Integer overflow in the TCP/IP implementation in Microsoft
Windows ...)
+ TODO: check
CVE-2011-2012 (Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold,
Update 1, ...)
NOT-FOR-US: Microsoft Forefront
CVE-2011-2011 (Use-after-free vulnerability in win32k.sys in the kernel-mode
drivers ...)
@@ -6807,8 +6801,8 @@
RESERVED
CVE-2011-2005 (afd.sys in the Ancillary Function Driver in Microsoft Windows XP
SP2 ...)
NOT-FOR-US: Microsoft Windows
-CVE-2011-2004
- RESERVED
+CVE-2011-2004 (Array index error in win32k.sys in the kernel-mode drivers in
...)
+ TODO: check
CVE-2011-2003 (Buffer overflow in win32k.sys in the kernel-mode drivers in
Microsoft ...)
NOT-FOR-US: Microsoft Windows
CVE-2011-2002 (win32k.sys in the kernel-mode drivers in Microsoft Windows Vista
SP2, ...)