[VIM] CVE errors in ZDI-13-011 / ZDI-13-012

[ZDI Disclosures]

These issues have been corrected and reflecting appropriately on our 
published advisories page: 
http://www.zerodayinitiative.com/advisories/published/

Regards,
The ZDI Team

On 2/13/2013 9:35 AM, ZDI Disclosures wrote:
> That issue was called out in Daniel's original mail below and is not a 
> new issue.
>
> We are correcting both issues.
>
> Regards,
> The ZDI Team
>
> On 2/13/2013 9:06 AM, Narayan Agarwalla wrote:
>>
>> Hi,
>>
>> Looks like the same error is also present in 
>> http://www.zerodayinitiative.com/advisories/ZDI-13-013/ list 
>> CVE-2013-1543 which is not a part of the Oracle CPU and they linked 
>> it to CVE-2012-1543.
>>
>> Can you please correct it?
>>
>> Regards,
>>
>> Narayan
>>
>> *From:*vim-bounces at attrition.org [mailto:vim-bounces at attrition.org] 
>> *On Behalf Of *Daniel Moeller
>> *Sent:* Wednesday, February 13, 2013 7:20 AM
>> *To:* vim at attrition.org
>> *Cc:* zdi-disclosures at tippingpoint.com
>> *Subject:* [VIM] CVE errors in ZDI-13-011 / ZDI-13-012
>>
>> http://www.zerodayinitiative.com/advisories/ZDI-13-011/ lists 
>> CVE-2013-3213 
>> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3213> 
>> which doesn't exist according to the CVE entry, and is not part of 
>> the Oracle CPU linked to. CVE-2012-3213 
>> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3213> 
>> does exist in that CPU, and seems to be the intended reference.
>> http://www.zerodayinitiative.com/advisories/ZDI-13-012/ has the same 
>> problem, though the CVE is simply reserved, with CVE-2013-1543 
>> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1543> vs 
>> CVE-2012-1543 
>> <http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1543>.
>>
>> Daniel
>> OSVDB.org
>>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.attrition.org/pipermail/vim/attachments/20130213/a2c31209/attachment.html>