[VIM] [CVENEW] New CVE CANs: 2013/03/25 21:00 ; count=2

[coley at mitre.org]

======================================================
Name: CVE-2013-1161
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1161
Final-Decision: 
Interim-Decision: 
Modified: 
Proposed: 
Assigned: 20130111
Category: 
Reference: CISCO:20130319 Cisco Jabber IM for Android Denial of Service Vulnerability
Reference: URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1161

The XML parser in the Cisco Jabber IM application for Android allows
remote authenticated users to cause a denial of service (blocked
connection) by leveraging an entry on a Buddy list and sending a
crafted XMPP presence update message, aka Bug ID CSCue38383.



======================================================
Name: CVE-2013-1162
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1162
Final-Decision: 
Interim-Decision: 
Modified: 
Proposed: 
Assigned: 20130111
Category: 
Reference: CISCO:20130315 Cisco IOS XR Traffic Engineering Denial of Service Vulnerability
Reference: URL:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1162

The traffic engineering (TE) processing subsystem in Cisco IOS XR
allows remote attackers to cause a denial of service (process restart)
via crafted TE packets, aka Bug ID CSCue04000.