[VIM] CVE errors in ZDI-13-011 / ZDI-13-012

[ZDI Disclosures]

That issue was called out in Daniel's original mail below and is not a 
new issue.

We are correcting both issues.

Regards,
The ZDI Team

On 2/13/2013 9:06 AM, Narayan Agarwalla wrote:
>
> Hi,
>
> Looks like the same error is also present in 
> http://www.zerodayinitiative.com/advisories/ZDI-13-013/ list 
> CVE-2013-1543 which is not a part of the Oracle CPU and they linked it 
> to CVE-2012-1543.
>
> Can you please correct it?
>
> Regards,
>
> Narayan
>
> *From:*vim-bounces at attrition.org [mailto:vim-bounces at attrition.org] 
> *On Behalf Of *Daniel Moeller
> *Sent:* Wednesday, February 13, 2013 7:20 AM
> *To:* vim at attrition.org
> *Cc:* zdi-disclosures at tippingpoint.com
> *Subject:* [VIM] CVE errors in ZDI-13-011 / ZDI-13-012
>
> http://www.zerodayinitiative.com/advisories/ZDI-13-011/ lists 
> CVE-2013-3213 
> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3213> 
> which doesn't exist according to the CVE entry, and is not part of the 
> Oracle CPU linked to. CVE-2012-3213 
> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3213> does 
> exist in that CPU, and seems to be the intended reference.
> http://www.zerodayinitiative.com/advisories/ZDI-13-012/ has the same 
> problem, though the CVE is simply reserved, with CVE-2013-1543 
> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1543> vs 
> CVE-2012-1543 
> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1543>.
>
> Daniel
> OSVDB.org
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.attrition.org/pipermail/vim/attachments/20130213/e3ff9e3c/attachment.html>