26日 月曜日、友引

+ CESA-2013:X007 Moderate Xen4CentOS kernel Security Update
http://lwn.net/Alerts/564597/

+ VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability
http://www.vmware.com/security/advisories/VMSA-2013-0010.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1662

+ RealNetworks, Inc. Releases Update to Address Security Vulnerabilities.
http://service.real.com/realplayer/security/08232013_player/en/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4973
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4974

+ VMware Workstation and Player vmware-mount Command Flaw Lets Local Users Gain Root Privileges
http://www.securitytracker.com/id/1028948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1662

+ HP StoreOnce D2D Backup System Unspecified Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1028947
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2353

+ Google Chrome Multiple Bugs Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1028942
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2887
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2900
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2901
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2902
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2903
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2904
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2905

+ VMware Workstation / Player "vmware-mount" Privilege Escalation Vulnerability
http://secunia.com/advisories/54580/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1662

Advisory: Following an update to Sophos Anti-Virus, the Sophos Anti-Virus service fails to start for PureMessage for Microsoft Exchange and Sophos for Microsoft SharePoint
http://www.sophos.com/en-us/support/knowledgebase/119717.aspx

Office 2003も来年4月にサポート終了、クラウドへの切り替えを急げ
日本マイクロソフトOffice ビジネス本部 Officeマーケティング グループ　シニア プロダクト マネージャー、輪島文氏
http://itpro.nikkeibp.co.jp/article/Interview/20130823/499785/?ST=security

VU#592942 SearchBlox contains multiple vulnerabilities
http://www.kb.cert.org/vuls/id/592942

REMOTE: dreamMail e-mail client v4.6.9.2 Stored XSS
http://www.exploit-db.com/exploits/27805

Oracle Endeca Server Remote Command Execution
http://cxsecurity.com/issue/WLB-2013080194