aboutsummaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorMartin Wilke <miwi@FreeBSD.org>2007-07-26 22:06:21 +0000
committerMartin Wilke <miwi@FreeBSD.org>2007-07-26 22:06:21 +0000
commitc7ba758c45430cdfdaeb46021a04ad09b7a4929a (patch)
treee80de66135ad59dfe737a38f87d3c8a5d10d96b5 /security
parentd5d178b9af34b30166ed21ef04388a720b6653a3 (diff)
downloadports-c7ba758c45430cdfdaeb46021a04ad09b7a4929a.tar.gz
ports-c7ba758c45430cdfdaeb46021a04ad09b7a4929a.zip
Notes
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml29
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 720c62eb6eb5..073f7229eeec 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="b73335a5-3bbe-11dc-8e83-0016179b2dd5">
+ <topic>libvorbis -- Multiple memory corruption flaws</topic>
+ <affects>
+ <package>
+ <name>libvorbis</name>
+ <range><lt>1.2.0,3</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>isecpartners reports:</p>
+ <blockquote cite="http://www.isecpartners.com/advisories/2007-003-libvorbis.txt">
+ <p>libvorbis contains several vulnerabilities
+ allowing heap overwrite, read violations and a function
+ pointer overwrite. These bugs cause a at least a denial
+ of service, and potentially code execution.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>http://www.isecpartners.com/advisories/2007-003-libvorbis.txt</url>
+ <cvename>CVE-2007-3106</cvename>
+ </references>
+ <dates>
+ <discovery>2007-06-05</discovery>
+ <entry>2007-07-26</entry>
+ </dates>
+ </vuln>
+
<vuln vid="ab2575d6-39f0-11dc-b8cc-000fea449b8a">
<topic>tomcat -- XSS vulnerability in sample applications</topic>
<affects>