[VIM] CVE-2011-3571 and CVE-2011-5035 - dual use

Steven M. Christey coley at rcf-smtp.mitre.org
Thu Feb 16 11:26:30 CST 2012


All,

CVE-2011-3571 and CVE-2011-5035 were listed in the Oracle February CPU for 
Java, but each of these CVEs were also used in their January CPU.  Many of 
the details don't align, so it's not clear if this is accidental dual-use, 
or the underlying vuln is really the same.  I have an inquiry to Oracle to 
figure out what's going on.

- Steve


More information about the VIM mailing list