diff options
| author | makc <makc@FreeBSD.org> | 2010-07-01 05:00:06 +0800 |
|---|---|---|
| committer | makc <makc@FreeBSD.org> | 2010-07-01 05:00:06 +0800 |
| commit | 8b72a21af2f858ace9ab6b1ee52f1d0a72ee25cb (patch) | |
| tree | 2056f91c122cc5d4a3f7de95f58a05fef7f72872 /security | |
| parent | 86ac52f6283148f9a460f7039198b29a2bfbcbaf (diff) | |
| download | freebsd-ports-gnome-8b72a21af2f858ace9ab6b1ee52f1d0a72ee25cb.tar.gz freebsd-ports-gnome-8b72a21af2f858ace9ab6b1ee52f1d0a72ee25cb.tar.zst freebsd-ports-gnome-8b72a21af2f858ace9ab6b1ee52f1d0a72ee25cb.zip | |
Document multiple vulnerabilities in irc/kvirc*
Approved by: remko@
Feature safe: yes
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 01c46f292e68..4d2f104184c7 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="8685d412-8468-11df-8d45-001d7d9eb79a"> + <topic>kvirc -- multiple vulnerabilities</topic> + <affects> + <package> + <name>kvirc</name> + <name>kvirc-devel</name> + <range><lt>4.0.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Two security vulnerabilities have been discovered:</p> + <blockquote cite="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2451"> + <p>Multiple format string vulnerabilities in the DCC functionality + in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors.</p> + </blockquote> + <blockquote cite="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2452"> + <p>Directory traversal vulnerability in the DCC functionality + in KVIrc 3.4 and 4.0 allows remote attackers to overwrite + arbitrary files via unknown vectors.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2010-2451</cvename> + <cvename>CVE-2010-2452</cvename> + <url>http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html</url> + </references> + <dates> + <discovery>2010-05-17</discovery> + <entry>2010-06-30</entry> + </dates> + </vuln> + <vuln vid="edef3f2f-82cf-11df-bcce-0018f3e2eb82"> <topic>png -- libpng decompression buffer overflow</topic> <affects> |