diff options
| author | Stanislav Sedov <stas@FreeBSD.org> | 2009-10-25 14:23:33 +0000 |
|---|---|---|
| committer | Stanislav Sedov <stas@FreeBSD.org> | 2009-10-25 14:23:33 +0000 |
| commit | 3f4313519cbdc4c3a4ad54b03c48a5005ddcc83b (patch) | |
| tree | 04f8b4b4fa263bc8352020be329cfcf18bebd536 /security/vuxml/vuln.xml | |
| parent | eefbd045b95c3339fa6a1a5ca02fe8975f687a05 (diff) | |
Notes
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index c0cb8a64289e..f6687ba6074c 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -35,6 +35,39 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="2544f543-c178-11de-b175-001cc0377035"> + <topic>elinks -- buffer overflow vulnerability</topic> + <affects> + <package> + <name>elinks</name> + <range><lt>0.11.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>SecurityFocus reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/36574/discuss"> + <p>ELinks is prone to an off-by-one buffer-overflow vulnerability + because the application fails to accurately reference the last + element of a buffer.</p> + <p>Attackers may leverage this issue to execute arbitrary code in + the context of the application. Failed attacks will cause + denial-of-service conditions.</p> + </blockquote> + </body> + </description> + <references> + <bid>36574</bid> + <cvename>CVE-2008-7224</cvename> + <mlist msgid="20080204235429.GA28006@diku.dk">http://linuxfromscratch.org/pipermail/elinks-users/2008-February/001604.html</mlist> + <url>http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380347</url> + </references> + <dates> + <discovery>29-07-2006</discovery> + <entry>2009-10-25</entry> + </dates> + </vuln> + <vuln vid="692ab645-bf5d-11de-849b-00151797c2d4"> <topic>squidGuard -- multiple vulnerabilities</topic> <affects> |