[VIM] CVE errors in ZDI-13-011 / ZDI-13-012

[Narayan Agarwalla]

Hi,

Looks like the same error is also present in http://www.zerodayinitiative.com/advisories/ZDI-13-013/ list CVE-2013-1543 which is not a part of the Oracle CPU and they linked it to CVE-2012-1543.

Can you please correct it?

Regards,
Narayan


From: vim-bounces at attrition.org [mailto:vim-bounces at attrition.org] On Behalf Of Daniel Moeller
Sent: Wednesday, February 13, 2013 7:20 AM
To: vim at attrition.org
Cc: zdi-disclosures at tippingpoint.com
Subject: [VIM] CVE errors in ZDI-13-011 / ZDI-13-012

http://www.zerodayinitiative.com/advisories/ZDI-13-011/ lists CVE-2013-3213<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3213> which doesn't exist according to the CVE entry, and is not part of the Oracle CPU linked to.  CVE-2012-3213<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3213> does exist in that CPU, and seems to be the intended reference.
http://www.zerodayinitiative.com/advisories/ZDI-13-012/ has the same problem, though the CVE is simply reserved, with CVE-2013-1543<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1543> vs CVE-2012-1543<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1543>.

Daniel
OSVDB.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.attrition.org/pipermail/vim/attachments/20130213/cdea725d/attachment-0001.html>