11日 火曜日、先負

+ Mozilla Firefox 33.1 released
https://www.mozilla.org/en-US/firefox/33.1/releasenotes/

+ UPDATE: GNU Bash Environment Variable Command Injection Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash

+ REMOTE: Internet Explorer 8 MS14-035 Use-After-Free Exploit
http://www.exploit-db.com/exploits/35213

+ Linux Kernel mac80211 poor encryption
http://cxsecurity.com/issue/WLB-2014110057
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8709

+ SA62109 Symantec Endpoint Protection Manager Multiple Vulnerabilities
http://secunia.com/advisories/62109/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3437
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3438
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3439

+ MantisBT XmlImportExport Plugin CVE-2014-8598 Multiple Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/70996
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8598

+ MantisBT XmlImportExport Plugin 'ImportXml.php' Arbitrary PHP Code Execution Vulnerability
http://www.securityfocus.com/bid/70993
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7146

JVNDB-2014-000129 OpenAM におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000129.html

チェックしておきたい脆弱性情報＜2014.11.11＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/111000027/?ST=security

NECが識別タグ不要の認証技術、スマホのカメラで真贋判定
http://itpro.nikkeibp.co.jp/atcl/news/14/111001832/?ST=security

200人以上の専任技術者が働く、ゼロデイ攻撃を140件検知
米フォーティネットがラボを披露
http://itpro.nikkeibp.co.jp/atcl/news/14/111001825/?ST=security

Macに感染してiPhoneやiPadを攻撃、新種ウイルス「WireLurker」が出現
http://itpro.nikkeibp.co.jp/atcl/news/14/111001819/?ST=security

「金銭目的のサイバー犯罪が増加する」とトレンドマイクロが警告
http://itpro.nikkeibp.co.jp/atcl/news/14/111001816/?ST=security

REMOTE: Visual Mining NetCharts Server Remote Code Execution
http://www.exploit-db.com/exploits/35211