aboutsummaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorMatthias Andree <mandree@FreeBSD.org>2012-12-03 20:16:21 +0000
committerMatthias Andree <mandree@FreeBSD.org>2012-12-03 20:16:21 +0000
commitd8c09eec637d10849ee285dbdffb0cd49783e21b (patch)
tree8dc40083c81ef74968abfe9c4648b7acb9432994 /security
parentf16591cfb5d8ad7cb21e879bd682d3beb060ef01 (diff)
Notes
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml25
1 files changed, 25 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 0586f46404d5..849785755794 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -51,6 +51,31 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="f524d8e0-3d83-11e2-807a-080027ef73ec">
+ <topic>bogofilter -- heap corruption by invalid base64 input</topic>
+ <affects>
+ <package> <name>bogofilter</name> <range><lt>1.2.3</lt></range> </package>
+ <package> <name>bogofilter-sqlite</name> <range><lt>1.2.3</lt></range> </package>
+ <package> <name>bogofilter-tc</name> <range><lt>1.2.3</lt></range> </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>David Relson reports:</p>
+ <blockquote cite="https://bogofilter.svn.sourceforge.net/svnroot/bogofilter/trunk/bogofilter/NEWS">
+ <p>Fix a heap corruption in base64 decoder on invalid input.
+ Analysis and patch by Julius Plenz, [FU Berlin, Germany].</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2012-5468</cvename>
+ </references>
+ <dates>
+ <discovery>2012-10-17</discovery>
+ <entry>2012-12-03</entry>
+ </dates>
+ </vuln>
+
<vuln vid="5af51ae9-3acd-11e2-a4eb-00262d5ed8ee">
<topic>chromium -- multiple vulnerabilities</topic>
<affects>