3日 木曜日、赤口

+ VMware Player 6.0.3 released
https://www.vmware.com/support/player60/doc/player-603-release-notes.html

+ Multiple Vulnerabilities in Cisco Unified Communications Domain Manager
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm

+ HPSBMU03055 rev.1 - HP Smart Update Manager (HP SUM) running OpenSSL, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Disclosure of Information
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04349175-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470

+ Internet Explorer 8 Fixed Col Span ID full ASLR, DEP and EMET 4.1.X bypass
http://cxsecurity.com/issue/WLB-2014070008
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1876

+ OpenSSL Project Roadmap
http://www.openssl.org/about/roadmap.html

JVNDB-2014-000066 SX-2000WG におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000066.html

JVNDB-2014-000065 SX-2000WG におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000065.html

【複雑化するセキュリティ、あなたに迫る脅威】
第4回　情報漏洩が「多様化」、恐喝ソフトによる金銭要求も急増
http://itpro.nikkeibp.co.jp/article/COLUMN/20140620/565688/?ST=security

Microsoft、Outlook.comとOneDriveで暗号化を強化
http://itpro.nikkeibp.co.jp/article/NEWS/20140702/568302/?ST=security

UPDATE: JVNVU#94401838 OpenSSL の heartbeat 拡張に情報漏えいの脆弱性
http://jvn.jp/vu/JVNVU94401838/

JVNVU#99696049 複数の Apple 製品の脆弱性に対するアップデート
http://jvn.jp/vu/JVNVU99696049/index.html

DoS/PoC: Baidu Spark Browser v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)
http://www.exploit-db.com/exploits/33951