3日 木曜日、赤口

+ Apache OpenOffice 4.0.1 is released
https://cwiki.apache.org/confluence/display/OOOUSERS/AOO+4.0.1+Release+Notes

+ APSB13-25 Prenotification Security Advisory for Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb13-25.html

+ Cisco IOS XR Software Memory Exhaustion Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131002-iosxr
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5503

+ Microsoft Internet Explorer SetMouseCapture Use-After-Free
http://cxsecurity.com/issue/WLB-2013100011

+ Firefox for Android Same-origin bypass through
http://cxsecurity.com/issue/WLB-2013100010

+ Linux Kernel Patches For Linux Kernel Security
http://cxsecurity.com/issue/WLB-2013100009

+ REMOTE: Micorosft Internet Explorer SetMouseCapture Use-After-Free
http://www.exploit-db.com/exploits/28682

+ Linux Kernel CVE-2013-4345 Off-By-One Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/62740
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345

Advisory: Sophos Endpoint v10.2: Automatic upgrade to v10.3
http://www.sophos.com/en-us/support/knowledgebase/119681.aspx

Announcing PostgreSQL Studio 1.0
http://www.postgresql.org/about/news/1485/

ネットで「虚偽の噂」を広めると3年間勾留：中国（WIRED.jp）
http://itpro.nikkeibp.co.jp/article/NEWS/20131003/508542/?ST=security

世界のセキュリティ・ラボから
IEの新たな脆弱性、一部標的型攻撃での使用を確認
http://itpro.nikkeibp.co.jp/article/COLUMN/20130930/507759/?ST=security

「Linuxセキュリティ標準教科書」、LPI-Japanが無償公開
http://itpro.nikkeibp.co.jp/article/NEWS/20131002/508527/?ST=security

アイベクスがPC操作を制御するセキュリティーソフト新版、Win8を管理可能に
http://itpro.nikkeibp.co.jp/article/NEWS/20131002/508416/?ST=security

ソフトバンクが端末分割代金を“未入金”として信用情報機関に誤登録、1.7万ユーザーに影響
http://itpro.nikkeibp.co.jp/article/NEWS/20131002/508163/?ST=security

チェックしておきたい脆弱性情報＜2013.10.02＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130930/507756/?ST=security

UPDATE: JVNTA13-071A Microsoft 製品の複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA13-071A/index.html

VU#392654 Multiple Vulnerabilities in Baramundi Management Suite
http://www.kb.cert.org/vuls/id/392654

VU#976534 L3 CPU shared cache architecture is susceptible to a Flush+Reload side-channel attack
http://www.kb.cert.org/vuls/id/976534

REMOTE: freeFTPd PASS Command Buffer Overflow
http://www.exploit-db.com/exploits/28681

LOCAL: PinApp Mail-SeCure 3.70 - Access Control Failure
http://www.exploit-db.com/exploits/28680

DoS/PoC: HylaFAX+ 5.2.4 - 5.5.3 - Buffer Overflow
http://www.exploit-db.com/exploits/28683