4日 金曜日、先勝

+ マイクロソフト セキュリティ情報の事前通知 - 2013 年 10 月
http://technet.microsoft.com/ja-jp/security/bulletin/ms13-oct

+ About the security content of the OS X Mountain Lion v10.8.5 Supplemental Update
http://support.apple.com/kb/HT5964
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5163

+ Google Chrome 30.0.1599.69 released
http://googlechromereleases.blogspot.jp/2013/10/stable-channel-update_3.html

+ HPSBPI02892 rev.1 - Certain HP FutureSmart MFP, Weak PDF Encryption, Local Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03888014-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4828
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4829

+ IBM AIX Buffer Overflows in Printer Commands Let Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1029124

+ SA55164 IBM AIX "mkque" and "mkquedev" Privilege Escalation Vulnerabilities
http://secunia.com/advisories/55164/

+ Microsoft Internet Explorer SetMouseCapture Use-After-Free
http://cxsecurity.com/issue/WLB-2013100011

+ Firefox for Android Same-origin bypass through
http://cxsecurity.com/issue/WLB-2013100010

+ Apple iOS 7 iPad2 Face-Time 1.0.2 Privacy Vulnerability
http://cxsecurity.com/issue/WLB-2013100021

+ Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
http://cxsecurity.com/issue/WLB-2013030046

+ Apple Mac OS X CVE-2013-5163 Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/62812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5163

+ Microsoft October 2013 Advance Notification Multiple Vulnerabilities
http://www.securityfocus.com/bid/62797

When using Threat Emulation to scan mail content, some files encoded in MIME may be incorrectly decoded causing a 'False-Negative' result of the emulated file
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk95245&src=securityAlerts

ウイルスバスター クラウド プログラムアップデートのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=2016

ウイルスバスター モバイル バージョン 3.5.0.1290公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=2015

カウントダウン！個人情報保護法改正
新しいデータ時代のガバナンスを作ろう
OpenID Foundation理事長、崎村夏彦氏
http://itpro.nikkeibp.co.jp/article/COLUMN/20130927/507442/?ST=security

DIT、アカウント/パスワードのハードコーディングを回避するソフトに廉価版
http://itpro.nikkeibp.co.jp/article/NEWS/20131003/508747/?ST=security

FBIが違法薬物売買サイト「Silk Road」の首謀者を逮捕、米メディアが報道
http://itpro.nikkeibp.co.jp/article/NEWS/20131003/508584/?ST=security

DoS/PoC: Evince PDF Reader - 2.32.0.145 (Windows) and 3.4.0 (Linux) - Denial Of Service
http://www.exploit-db.com/exploits/28679