18日 火曜日、先勝

+ RHSA-2014:0304 Important: mutt security update
http://rhn.redhat.com/errata/RHSA-2014-0304.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0467

+ HPSBNS02969 rev.1 - HP NonStop Servers running Java 7, Multiple Remote Vulnerabilities affecting Confidentiality, Integrity and Availability
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04126444-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3563
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5035
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0497
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0498
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0499
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0501
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1531
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1713
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1717
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1718
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1724
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5081
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5083
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2415
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2424
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830

+ RHSA-2014:0305 Moderate: samba security update
http://rhn.redhat.com/errata/RHSA-2014-0305.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0214
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4124

+ Sudo 1.8.10p2 released
http://www.sudo.ws/sudo/stable.html#1.8.10p2

+ iOS 7 - Kernel Mode Memory Corruption
http://www.exploit-db.com/exploits/32333/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1287

+ SA57440 Google Chrome for Android Multiple Vulnerabilities
http://secunia.com/advisories/57440/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1705
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1713

+ SA57439 Google Chrome Blink Bindings Use-After-Free and V8 Memory Corruption Vulnerabilities
http://secunia.com/advisories/57439/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1705
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1713

InterScan Messaging Security Virtual Appliance 8.5 Critical Patch build 12770 公開のお知らせ
http://app.trendmicro.co.jp/support/news.asp?id=2094

JVNDB-2014-000030 Android 版アプリ「出前館」における SSL サーバ証明書の検証不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000030.html

JVNDB-2014-000031 R-Company 製 Unzipper におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000031.html

NSAがFacebook偽装の報道を否定、海外メディアが声明文に注目
http://itpro.nikkeibp.co.jp/article/NEWS/20140317/543982/?ST=security

DoS/PoC: Free Download Manager - Stack-based Buffer Overflow
http://www.exploit-db.com/exploits/32332

DoS/PoC: Gold MP4 Player 3.3 - Universal SEH Exploit (MSF)
http://www.exploit-db.com/exploits/32329