29日 金曜日、赤口

+ Linux kernel 3.2.53 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.53

+ Cisco IOS XR SNMP Memory Leak Lets Remote Users Deny Service
http://www.securitytracker.com/id/1029408
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6700

+ Cisco IOS XE MPLS Processing Flaw Let Remote Users Deny Service
http://www.securitytracker.com/id/1029407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6706

+ Windows NDPROXY Driver Flaw Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1029406
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5065

Linux Kernel Buffer Overflow in qeth_snmp_command() Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1029404
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6381

+ REMOTE: MS13-090 CardSpaceClaimCollection ActiveX Integer Underflow
http://www.exploit-db.com/exploits/29857

+ REMOTE: MS12-022 Microsoft Internet Explorer COALineDashStyleArray Unsafe Memory Access
http://www.exploit-db.com/exploits/29858

+ REMOTE: Apache Roller OGNL Injection
http://www.exploit-db.com/exploits/29859

+ LOCAL: Adobe Acrobat Reader ASLR/DEP Bypass Exploit with SANDBOX BYPASS
http://www.exploit-db.com/exploits/29881

+ SA55809 Microsoft Windows NDProxy.sys Privilege Escalation Vulnerability
http://secunia.com/advisories/55809/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5065

+ AndroidOS 4.3 / com.android.settings Permission Bypass
http://cxsecurity.com/issue/WLB-2013110204
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6271

+ Adobe Acrobat Reader ASLR/DEP Bypass Exploit with SANDBOX BYPASS
http://cxsecurity.com/issue/WLB-2013110202
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0640

+ Microsoft Tagged Image File Format (TIFF) Integer Overflow
http://cxsecurity.com/issue/WLB-2013110199
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3906

+ Linux Kernel CVE-2013-6405 Memory Leak Multiple Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/63999
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6405

2014年問題はコーポレートのリスク、経営トップは覚悟を
ラック　取締役最高技術責任者　西本逸郎氏
http://itpro.nikkeibp.co.jp/article/Interview/20131125/520483/?ST=security

パスワードはゲームに例えて理解する
http://itpro.nikkeibp.co.jp/article/COLUMN/20131126/520722/?ST=security

【今さら聞けない！ ソーシャルメディアの落とし穴】
［5］見知らぬ「友だち」が勝手に増殖してしまうという落とし穴（LINE編）
http://itpro.nikkeibp.co.jp/article/COLUMN/20131121/519675/?ST=security

欧州委、米欧間の信頼回復に努めるよう米当局に呼びかけ
http://itpro.nikkeibp.co.jp/article/NEWS/20131128/521247/?ST=security

世界のセキュリティ・ラボから
Android 4.4をセキュリティの観点から考察
http://itpro.nikkeibp.co.jp/article/COLUMN/20131125/520506/?ST=security