$B%;%-%e%j%F%#%[!<%k(B memo - 2007.01

Last modified: Fri Dec 26 13:20:25 2008 +0900 (JST)

$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B

$B"#(B 2007.01.31

$B!U(B Vista $BMQ$N=$@5%W%m%0%i%`$,(B WSUS $B$KN.$l$F$-$F$^$9$M!D!D(B$B!#(B 929763 929427 925528 928089 929685 930163 929777 929762 929761 929735 929615 $B$G$9$+!#B?$9$.!#(B
$B!U(B $B6&KE:a!'BP>]HH:a$NBgI}:o8:$G9g0U!!<+L1>.0Q$,=i2q9g(B ($BKhF|(B, 1/31)
$B!U(B $BO*FC ($BFIGd(B, 1/31)
$B!U(B $B8!::?)!V%(%K%^%/%j%s!W<+ ($B9>:j%0%j%3(B, 1/30)
$B!U(B $B@1Ln7/$N(BWeb$B%"%W%j$[$N$\$N2~B$7W2hHV30JT!J(B1$B!K(BFlash$B$H%]%j%7!<%U%!%$%k$NL)@\$J%+%s%1%$(B (@IT, 1/30)
$B!U(B $B7HBS$NM-32%5%$%H@)8B5!G=!"I8=`AuHw$r!DCf65?3$,Ez?=(B ($BFIGd(B, 1/30)$B!#4XO"(B: $B!V%U%#%k%?IU$-$,%G%U%)%k%H!W$O=EBg$JLdBj$@(B ($B:j;3?-IW$N(BBlog, 1/24)
$B!U(B $B%U%!%$%k8r49%=%U%H$K$h$k%@%&%s%m!<%I$r;dE*J#@=$NHO0O30$K(B: $BJ82=?35D2qCx:n8"J,2J2q!"Js9p=q$G8!F$$NI,MW@-$r;XE&(B ($BF|7P(B, 1/31)
$B!U(B $B%J%7%g%J%k$N%^%C%5!<%8%A%'%"(B6$B5! ($B2HEE(B Watch, 1/31)
$B!U(B $BF|K\%,%9@PL}5!4o9)6H2q!"@PL}4XO"5!4o$N%j%3!<%k8F$S$+$1$r6/2=(B $B!A%J%7%g%J%k!";0MN!"%N!<%j%D$J$I(B8$B ($B2HEE(B Watch, 1/31)
$B!U(B $B$=$N8e$N%7%s%I%i!<(B$B!#$"$kJ}$+$i6=L#?<$$>pJs$r$$$?$@$$$?(B ($B$"$j$,$H$&$4$6$$$^$9(B) $B$N$G!"$=$l$r85$K$$$m$$$mD4$Y$?7k2L!#(B
- $BF|7P$b$N$E$/$j(B2006$BG/(B10$B7n9f(B$B!#(B $BFC=8$O!V%7%s%I%i!<$NGHLf!W(B
- $BAH9~$_%=%U%H%&%'%"9)K<(B ($B
- $B%7%s%I%i!<$N;v8N$r:FH/KI;_$9$k$?$a$K%(%s%8%K%"$O2?$r$9$Y$-$+(B (2006.06.17)
- $B%7%s%I%i!<$N%(%l%Y!<%?;v8N!J$D$E$-!K(B (2006.10.22)
$B7zC[J,2J2q7zC[J*Ey;v8N!&:R32BP:vIt2q(B ($B9qEZ8rDL>J(B)$B!#%(%l%Y!<%?!<%o!<%-%s%0%A!<%`4XO"$N;qNA$"$j!#(B $BBh#12s;qNA$J$I$K0Q0wL>Jm$"$j$^$9!#(B $BIt2qCf4VJs9p!V%(%l%Y!<%?!<$N0BA43NJ]$K$D$$$F!W(B ($B$3$l$h$j$b!"(B$B7zC[J,2J2q7zC[J*Ey;v8N!&:R32BP:vIt2q!!Bh#62s$N;qNA(B$B$NJ}$,;29M$K$J$k$H;W$&(B) $B$NCf?H$O!V!A$r8!F$!W$P$+$j$G!"MW$9$k$K:#$O2?$b$7$J$$$C$F$3$H$G$9$J!"$HM}2r$9$k$7$+$J$5$2!#(B
$B5!G=0BA4$H0BA49)3X(B: $B4m81$N4IM}!!BP!!0BA4$N4IM}(B ($B@6?e5WFs!&2#IM9qBgL>M@65
$B9q:]E*$J0BA4$NDj5A$rL5;k$7$?0BA44p=`:n$j!A!A:FH/KI;_$N0Q0w2q$O2?$r;D$7$?$+!)(B (2006.07.22)$B!#%(%l%Y!<%?!<%o!<%-%s%0%A!<%`$N?MA*$K$D$$$F8l$C$F$$$k$h$&$@!#(B
$B%(%l%Y!<%?$N0BA43NJ]$X$NBP1~0F$K$D$$$F!A!A9qEZ8rDL>J$N8!F$2q;qNA$h$j(B (2006.08.14)
$B%(%l%Y!<%?$N0BA43NJ]$X$NBP1~0F$K$D$$$F(B($B$=$N#2!K!A!A9qEZ8rDL>J$N8!F$2q;qNA$h$j(B (2006.08.27)
$B%(%l%Y!<%?0BA4LdBj(B

$B%7%s%I%i! ($B%$%6(B!, 2006.12.15)

$B%7%s%I%i!<$N;v8N!"!V%3%$%k%7%g!<%H860x!W!D4IM}2q ($BFIGd(B, 2006.12.27)

$B%7%s%I%i!<%(%l%Y!<%?!<9b9;@805;`;v7o(B ($B894,%J%l%C%8%M%C%H%o!<%/(B)

$B"#(B $BDI5-(B

SONY $B@=%P%C%F%jJ}LL(B

$B!!(B$B%=%K!<3t<02q ($BIY;NDL(B, 2007.01.30)

$BEv/$J$$>u67$K$"$j$^$9(I!$B$=$N$?$a!"Ev=i$O?=$79~$_4|4V$r(B2007$BG/(B1$B7nKvF|$^$G$H$7$F$*$j$^$7$?$,!"(B2007$BG/(B7$B7nKvF|$^$G1dD9$7$^$9!#(B

Adobe Acrobat Reader Plugin - Multiple Vulnerabilities

$B!!(BAPSB07-01 $B$H(B APSA07-0[12] $B$NF|K\8lHG$,=P$F$$$^$7$?!#(B

The "Sony rootkit" case

$B!!(BSONY BMG$B!"(Brootkit$BLdBj$G(BFTC$B$HOB2r$X(B (ITmedia, 2007.01.31)$B!#(BFTC $B$HOB2r$@$=$&$G$9!#(B

$B"#(B $B$$$m$$$m(B (2007.01.31)
(various)

Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability$B!#(B CVE-2007-0478
$B%1!<%?%$(B DoS (Bluetooth $B7PM3(B)
- Bluetooth DoS by obex push
Sony Ericsson K700i, Nokia N70, Motorola MOTORAZR V3, Sony Ericsson W810i, LG Chocolate KG800 $B$,BP>]$H$5$l$F$$$k!#(B CVE-2007-0521 CVE-2007-0522 CVE-2007-0523 CVE-2007-0524

$B"#(B 2007.01.30

$B!U(B IPA$B$?$s$+$i$NJV;v(B ($B$\$/$O$^$A$A$c$s!*(B(Hatena), 1/30)
$B!U(B $B:G9b:[$H?7J9 ($BJ]:dE8?M$N$I$3$I$3F|5-(B, 1/30)
$B
$B!U(B $B%K%U%F%#$N?7(BWeb$B%a!<%k%5!<%S%9$,%7%9%F%`>c32$GDd;_!":F3+;~4|$OL$Dj(B ($BF|7P(B IT Pro, 1/29)$B!#(B Web $B%a!<%k(B (@Nifty)$B!#F0$$$F$^$;$s$M!D!D!#(B

$B!U(B Windows Vista (TM)$B$r$*;H$$$N$*5RMM$X(B (@Nifty)$B!#$$$m$$$m$@$a$J$b$N$,$"$k$s$G$9$M!#(B

$B!U(B $B%7%^%s%F%C%/!"(BIT$B4IM}%=%U%H%&%'%"$N(BAltiris$B$rGc<}$X(B (CNET, 1/30)$B!#$"$i$^$"!#(B
$B!U(B $B:G?7HG%@%&%s%m!<%I(B: $B%&%$%k%9%P%9%?!<(B2007 $B%H%l%s%I(B $B%U%l%C%/%9(B $B%;%-%e%j%F%#(B ($B%H%l%s%I%^%$%/%m(B)$B!#(B15.30 $BHG=P$F$^$9!#;`$L$[$ICY$$>u67$O2r>C$5$l$F$$$k$N$G$7$g$&$+(B? $B$H$3$m$G!"%&%$%k%9%P%9%?!<(B 2007 $B$r%$%s%9%H!<%k$7$?$^$^(B Vista $B$K%"%C%W%0%l!<%I$9$k$HJQ$K$J$kLOMM!#(B
- $B%&%$%k%9%P%9%?!<(B2007 - 15.x: Windows$B$r(BVista$B$K%"%C%W%0%l!<%I$7$?$H$3$m!"%&%$%k%9%P%9%?!<(B2007$B$,@5>o$KF0:n$7$J$$(B
$B!!$^$?!"@)8B;v9`$b$"$kLOMM!#(B
- $B%&%$%k%9%P%9%?!<(B2007 - 15.x: Vista$B4D6-$G$N@)8B;v9`(B
$B!!$"$H!"%H%l%s%I%^%$%/%m$N$;$$$8$c$J$$IT6q9g;vNc!#$I$A$i$b%^%$%/%m%=%U%H$,=$@5%b%8%e!<%k$r:n@.Cf!#(B
- $B%&%$%k%9%P%9%?!<(B2007 - 15.x: $B%o%$%d%l%9%M%C%H%o!<%/$N$B!#$3$A$i$O(B Vista $BFCM-!#(B
- $B%&%$%k%9%P%9%?!<(B2007 - 15.x: $B%@%$%d%k%"%C%W$d%V%m!<%I%P%s%I4D6-$G@\B3Cf!"%9%?%s%P%$$+$i$NI|5"$d%9%j!<%W$X$N0\9T$,$G$J$$(B$B!#$3$A$i$O(B XP $B0JA0$b$+!#(B
$B!!$7$+$7!"=$@5%b%8%e!<%k$,$G$-$?$H$7$F$b!VM-=~%5%]!<%H$+$i
$B!U(B $BJ!Eg!&BgLnIB1!;v7o(B
- $BJ!Eg!&BgLnIB1!;v7o$N=i8xH=!"Ho9p$OL5:ap$KAJ$($?8!;!B&!"@lLg@-6/D4$9$kJ[8nB&(B ($BF|7P(B Medical Online, 1/27)
  $B:#2s$N:[H=$O!"(B2006$BG/(B2$B7n$K2CF#0e;U$,BaJa$5$l$?D>8e$+$i!"4X783X2q$+$i935DJ8$,=P$5$l$k$J$I!"$b$H$b$H0eNE3&$NCmL\EY$O9b$+$C$?!#5/AJ;vr$N0c7{@-$^$G$bK!Dn$N>l$G5DO@$5$l$kMMAj$rDh$7$F$$$k!#$3$l$O$3$l$^$G$N:[H=$G$O$"$^$j8+$i$l$J$+$C$?!":#2s$N:[H=$NFCD'$H$$$($k!#(B
- $B0e;U$,7:;v:[H=$NHo9p$K$J$C$?$H$-(B: $BJ!Eg8)N)BgLnIB1!$N0eNE;v8N$K8+$k0e;U$N6-6x(B ($BF|7P(B Medical Online, 1/28)
- $BBgLnIB1!;v7o$N=i8xH=$r ($BF|7P(B Medical Online, 1/29)
- $B;:IX?M2J0e!"2CF#9nI'0e;U$NBaJa$K935D$7$^$9(B ($B2CF#0e;U$r;Y1g$9$k%0%k!<%W(B)
- $B935DJ8(B ($B0q>k8);:IX?M2J0e2q!&F|K\;:2JIX?M2J3X2q0q>kCOJ}It2q!&0q>k8)0e;U2q(B, 2006.03.10)
$B!!$3$N!VBaJa!W$K$h$C$F!"0eNE8=>l$K$O?<9o$J1F6A$,H/@8$7$F$$$k$=$&$G!D!D!#(B
$B!U(B $B0cK!%3%T!<$NFbIt9pH/A}2C$O8D?M$N0U<18~>e$r<($9!"(BBSA$B3hF0Js9p(B (ITmedia, 1/30)
$B!U(B $B!H0cK!Ce$&$?!I$M$?(B
- $B$^$s1d$9$k!H0cK!Ce$&$?!I$N (ITmedia, 1/26)
- $B!H0cK!Ce$&$?!I%5%$%H!"Cf3X@8$N(B7$B3d$,MxMQ7P83$"$j(B (ITmedia, 1/29)
$B!U(B $B2>A[%^%7%s>e$G$N(BVista$B2TF0!"$J$s$+%d%P$/$M!)(B (wakatono$B$N5:$l%a%b(B, 1/29)$B!#$$$d$O$d!"%F%9%H$9$k$K$b6lO+$9$k(B OS $B$G$9$+!#(B $BJI$P$+$j$G$OD/$a$O:GDc$J$s$G$9$1$I$M$(!#(B $B3NG'$7$?$$?M$O$3$A$i$+$i(B: Find License Terms for Software Licensed from Microsoft

$B!!(B1.2kg $B$/$i$$$N(B iBook $B$D$/$C$F$/$@$5$$$h(B > Apple$B!#(B

$B!U(B Windows Vista$B$K$O!"(BWindows Anytime Upgrade$B$H$$$&5!G=$,$"$j$^$9!#%&%$%k%9%P%9%?!<(B2007$B$O(BWindows Anytime Upgrade$B$KBP1~$7$F$$$^$9$+!)(B ($B%H%l%s%I%^%$%/%m(B)$B!#$$$$$(!#(B

$B!U(B $B%"%$%U%k(BCM$B:F3+$KHo32BP:v2q5D$,935D(B (JANJAN, 1/28)$B!#B>?M$N6lFq$h$j$O<+J,$N%+%M!"$C$F$3$H$G$9$J!#(B

$B!U(B 3.5$B7?30IU$1%O!<%I%G%#%9%/%f%K%C%H(B $B!V(BLHD-ED250U2$B!W!V(BLHD-ED400U2$B!W!V(BLHD-ED250SAU2$B!W(B $B%&%$%k%9:.F~$N$*OM$S$H%&%$%k%9BP:v$N$40FFb(B ($B%m%8%F%C%/(B, 1/29)

$B@=IJL>(B $BBP>]%7%j%"%kHV9f(B $B3:EvBf?t(B

LHD-ED250U2 6CA3770****** 28$BBf(B

LHD-ED400U2 6CA3772****** 20$BBf(B

LHD-ED250SAU2 6CA3813****** 20$BBf(B

$B!U(B $BJ@ ($B;00f=;M'(B VISA $B%+!<%I(B, 1/25)

$BJ@pJs$,N.=P$7$?2DG=@-$,$"$k$3$H$,H=L@$$$?$7$^$7$?!#(B
($BCfN,(B)
$B!J(B1$B!KBP>]7o?t!!!!!'(B 14$B7o!JJ@ $B!D$&$A(B8$B7o$O4{$K2rLs:Q$_$GL58z$N%+!<%I>pJs$G$7$?!#(B
$B!J(B2$B!KBP>]%G!<%?!!!'(B $B2q0wHV9f!"M-8z4|8B!"%$%s%?!<%M%C%H%5!<%S%9MQ$N(BID$B!&%Q%9%o!<%IEy(B
$B!J$J$*!"$*5RMM$NL>A0!"=;=j!"EEOCHV9fEy$N>pJs$O4^$^$l$F$*$j$^$;$s!K(B

$B!U(B 1.5.0_11 $B$G$NJQ99E@(B (Java.sun.com)$B!#(BWindows Vista $B$X$NBP1~9`L\$,$1$C$3$&$"$j$^$9$M!#(B
$B!U(B NHK $BHVAH2~JQOC(B
- $BHVAH2~JQ!'#N#H#K$K#2I4K|1_Ge=~L?Na!!!V@/<#2HH/8@!WG'Dj(B ($BKhF|(B, 1/29)
  $BFnIRJ8:[H=D9$O!"#N#H#K44It$,J|1GA0$K0BG\?8;0e$K=E$/e9p$7$?!#(B
- $BHVAH2~JQ!'869p;TL1CDBN!"A4LL>!AJ$K$o$/!!!V2h4|E*H=7h!W(B ($BKhF|(B, 1/29)
- $B#N#H#KFCHVLdBj!'#N#H#KGTAJ!!!V4|BT8"!WN>?O$N7u!!!V2h4|E*!WJ($/869p$i(B ($BKhF|(B, 1/29)
$B!!(BNHK $B$,@/8"M?E^$N0U8~$r!VI,MW0J>e$K=E$/oCcHS;v$@$+$i$J$"!#$=$&$$$&Cf$G!"$J$*!V(B$B685mIB(B $B$J$<46@w$O3HBg$7$?$+(B$B!W(B $B$d!V(B$B%o!<%-%s%0%W%"!AF/$$$F$bF/$$$F$bK-$+$K$J$l$J$$!A(B$B!W(B($B;f208&5f=j$K$h$k(B$B$9$4$$46A[J8(B) $B$N$h$&$JNIl$NJ}!9$K$O%(!<%k$rAw$j$?$$!#(B

$B!!$H$$$&$o$1$G!"(BNHK $B$ON>HVAH$r!V(BNHK $B%"!<%+%$%V%9!WOH$GJ|Aw$7$F$/$@$5$$!#(B
$B!U(B $B%P%s%@%$!'%F%l%S%2!<%`#1#7K|8D$r2s<}!!EE8;%3!<%I$,2aG.(B ($BKhF|(B, 1/29)
$B2s<}BP>]$O!"F1%7%j!<%:$N!V$?$^$4$C$A$j$>!<$H!W!J#0#6G/#97nH/Gd!K!"!V%1%m%m73Ab!W!JF1!K!"!V$J$j$-$jBN46%\%&%1%s%8%c!
$B!!85$M$?(B: $B!V(BLet's! TV$B%W%l%$!!%7%j!<%:!W>&IJ$N2s<}!&8r49$N$*CN$i$;(B ($B%P%s%@%$(B, 1/29)
$B!U(B $BITFs2HJ}LL(B

$BITFs2H$NA40{NA@=IJ!"%5%C%]%m0{NA$,#27n$+$iHNGd5Y;_(B ($BFIGd(B, 1/30)$B!#$[$7$$J}$O:#$N$&$A$K!#(B $B%5%C%]%m$K:a$O$J$$$N$G$9$,!D!D(B
$BITFs2H!'#0#5G/$K$b%A%g%3$K%,@.CnIUCe!!8xI=$b2s<}$b$;$:(B ($BKhF|(B, 1/30)
$BITFs2H!'Cf7x44It$+$i$J$k<99TLr0w2q$,0U;W7hDj5!4X$K(B ($BKhF|(B, 1/29)
$B!U(B $B!V(BTeredo$B!W$r;H$C$?(BIPv6$B$KHt$S$D$/A0$K9MN8$9$Y$-$3$H(B ($BF|7P(B IT Pro, 1/30)

$B"#(B $BDI5-(B

$B$$$m$$$m(B (2007.01.17): $B!!(BSun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit
$B%U%l%C%7%e%j!<%@!<$N@H: $B!!(Bsage 1.3.10 $B$,=P$?$h$&$G$9!#(B

Sage 1.3.10 Released (sage.mozdev.org)
Bugzilla Bug 16320: content filter exploit (mozdev.org)$B!#(BAs reported by JPCERT/CC: $B$H$"$k$N$G!"$=$NOC$N$h$&$G$9!#(B

$B!!$3$l$K$"$o$;$F!"(BSage++ (Higmmer's Edition) 1.3.10 $B$bEP>l$7$F$$$^$9!#(B

[$B=EMW(B] Sage++ (Higmmer's Edition) 1.3.10 $B%j%j!<%9(B ($B$R$0$^$N$R$^%0(B)

$B!!$^$?!"(B[$B=EMW(B] Sage++ (Higmmer's Edition)$B$N@HpJs$K4X$7$F!"$*OM$S$H $B$,2CI.$5$l$F$$$^$9!#(B

(1/30$BDI5-(B) $B>e5-(BFail$B9`L\$NFb!"!V(BNon-Alpha-Non-Digit$B!W!V(BEvade_Regex_Filter2$B!W$K$D$$$F$O8x<0HG(BSage 1.3.10$B$G=$@5$5$l$?$3$H$r3NG'$7$^$7$?!#$7$+$7!";D$k!V(BDouble_open_angle_brackets$B!W$K$D$$$F$OL$$@$K=$@5$5$l$F$$$J$$LOMM$G$9!#>\$7$/$O$3$A$i$N%(%s%H%j$r;2>H$7$F2<$5$$!#>0!"@[:n$N(BSage++ 1.3.10$B$G$O9bB.(BHTML$B%U%#%k%?$,;HMQITG=$K$J$C$F$*$j!">e5-@H
$B!!$H$$$&$o$1$G!"(BSage 1.3.10 $B$K$O$^$@LdBj$,;D$C$F$$$k$h$&$G$9!#(B $BMxMQ
$B!!$=$&$@$5$s!"9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B"#(B $B$$$m$$$m(B (2007.01.30)
(various)

Oracle - Indirect Privilege Escalation and Defeating Virtual Private Databases
- Indirect Privilege Escalation (a chapter from the Oracle Hacker's Handbook, David Litchfield, published by Wiley)
- Defeating Virtual Private Databases (a chapter from the Oracle Hacker's Handbook, David Litchfield, published by Wiley)
Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS)$B!#$h$/$"$kOC!#(B
Multiple Printer Providers (spooler service) Privilege Escalation Exploit (milw0rm)$B!#(BDiskAccess NFS Client dapcnfsd.dll, Citrix Metaframe cpprov.dll, Novell nwspool.dll $B$NL>A0$,5s$,$C$F$$$k!#(B
[SA23960] Drupal Comment Preview Arbitrary Code Execution$B!#(B Drupal 4.7.6 / 5.1 $B$GD>$C$F$$$k$h$&$G$9!#(B
[SA23979] Sun Java System Access Manager Cross-Site Scripting$B!#(B patch $B$,$"$k$h$&$G$9!#(B

$B"#(B 2007.01.29

$B!U(B $B!V>pJs%;%-%e%j%F%#%,%P%J%s%9%7%s%]%8%&%`!W$N3+:E$K$D$$$F(B ($B7P;:>J(B, 1/29)$B!#(B$B>pJs%;%-%e%j%F%#%,%P%J%s%9%7%s%]%8%&%`(B 2007 ($BF|7P(B) $B$NOC!#(B 2007.02.20$B!"El5~ET@iBeED6h!"L5NA!#(B
$B!U(B .NET$B$G$N(BUnicode$B9g@.J8;z$N=hM}$K$D$$$FD4$Y$?(B ($BF|7P(B IT Pro, 1/23)$B!#$$$m$$$m$"$k$s$G$9$M!#(B
$B!U(B $BDc%+%m%j!<%,%9!'#1#5J!"KL3$F;!&KL8+$NCfFG ($BKhF|(B, 1/22)$B!#$H$s$H$+$$$b$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$BKL3$F;KL8+;T$G#3?M$,;`K4$7#1#1?M$,0l;@2=C:AG!J#C#O!KCfFG$K$J$C$?KL3$F;%,%9$N;v8N$KMm$_!"KL%,%9$HF1MM$KCfFG@-$N9b$$#C#O$r4^$`Dc%+%m%j!<%,%9$r6!5k$7$F$$$k;v6HJ$ND4$Y$GJ,$+$C$?!#$$$:$l$b#2#0#1#0G/$r$a$I$K0BA4$J9b%+%m%j!<%,%9$X@Z$jBX$($r=*$($kM=Dj$@$,!"8=>u$G$OE>49:n6H$KCe
$B!!$*$*$b$H$NLdBj$O$3$3$K$"$C$?!"$H!D!D!#(B

$B!!"!#C#O4^$`%,%96!5k;v6HJD4$Y!""($O9b%+%m%j!<$KE>49Cf!K(B
$B"(KL3$F;%,%9!J;%KZ;T!K(B
$B"(00@n%,%9!!!JKL3$F;00@n;T!K(B
$B!!6|O)%,%9!!!JKL3$F;6|O);T!K(B
$B!!< $B!!BS9-%,%9!!!JKL3$F;BS9-;T!K(B
$B!!4d8+Bt%,%9!JKL3$F;4d8+Bt;T!K(B
$B!!@D?9%,%9!!!J@D?9;T!K(B
$B!!H,8M%,%9!!!J@D?98)H,8M;T!K(B
$B!!90A0%,%9!!!J@D?98)90A0;T!K(B
$B!!;37A%,%9!!!J;37A;T!K(B
$B!!J!Eg%,%9!!!JJ!Eg;T!K(B
$B"(F|K\3$%,%9!JIY;3;T!K(B
$B!!C08e%,%9!!!J5~ETI\IqDa;T!K(B
$B"(J!;3%,%9!!!J9-Eg8)J!;3;T!K(B
$B!!?eEg%,%9!!!J2,;38)ARI_;T!K(B
$B"(;M9q%,%9!!!J0&I28):#<#;T!K(B

$B!!4XO"(B: $BKL3$F;KL8+;T$K$*$1$k%,%9CfFG;v8N$K$D$$$F!JBh#5Js!K(B ($B7P:Q;:6H>J(B, 1/22)

$B!U(B $BITFs2H!"D|$a$HDdBZ$N2L$F(B: $BIT>M;v$N:,8;$O(B12$BG/A0$N(B1$B7n(B23$BF|$K$"$j(B ($BF|7P(B BP, 1/29)$B!#ITFs2H$NC|Mn$O:rF|:#F|$O$8$^$C$?OC$G$O$J$$@b!#(B

$B!U(B $B$*$*$$$?$.$s$3$&%@%$%l%/%H!J8D?M8~$1%$%s%?!<%M%C%H%P%s%-%s%0!K(B $B$K$*$1$k!V%;%-%e%j%F%#$N7Y9p!W2hLL$K$D$$$F(B ($BBgJ,6d9T(B, 1/26)$B!#(B https://www2.paweb.anser.or.jp/ $B$rMxMQ$7$F$$$k%5%$%H$O$I$3$bF1MM$N>u67$K$J$C$F$$$?$h$&$G$9!#(B $BNc(B: $BEl5~ETL16d9T%$%s%?!<%M%C%H%P%s%-%s%0$K$*$1$k!V%;%-%e%j%F%#7Y9p!W2hLL$K$D$$$F(B ($BEl5~ETL16d9T(B, 1/26)$B!#(B Benjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!U(B $B!V(BJP$B%I%a%$%sL>J6Ah=hM}J}?KEy2~D{0F!W(B $B$KBP$9$k$40U8+Jg=8$N$*CN$i$;(B (JPNIC, 1/23)$B!#(B2/19 $B$^$G!#(B

$B!U(B 2007$BG/$N(BWindows$B%;%-%e%j%F%#$rE8K>$9$k(B ($BF|7P(B IT Pro, 1/29)
$B!U(B $B%k!&%b%s%I!&%G%#%W%m%^%F%#!<%/(B 2007.01 $B$h$j(B:
- $BJsF;$KBP$9$k6<0R(B$B!#3h;zN%$l$M$?!#%k!&%b%s%I!&%G%#%W%m%^%F%#!<%/$b6l@o$7$F$$$k$h$&$G$9!#(B
- EU$B$H%m%7%"$N%Q!<%H%J!<%7%C%W$K8~$1$F(B
- $B%1%$%s%:$NK:$l$i$l$?KG0W5!4X9=A[(B
- $B%A%c%Y%9!"%b%i%l%9!"$=$7$F%3%l%"(B
- $B%9%s%KGI%$%9%i%`
$B!U(B $B%,%;$M$?$,$"$k$"$k(B
$B!U(B $B!X%R%P%/%7%c$K$J$C$?%$%i%/5"4TJ (JANJAN, 1/25)

$B!U(B $B!VFJLZ8)7Y$N5u56!W:[H=!'Bh#12s8}F,J[O@(B (JANJAN, 1/25)
$B!U(B $B0E9f2=2>A[%I%i%$%V$G (@IT, 1/27)$B!#(B TrueCrypt $B$H$$$&%D!<%k$,$"$k$N$G$9$+!#(BWindows $B$H(B Linux $B$G;H$($k$=$&$G!#(B

$B%\%j%e!<%`$r0E9f2=$9$k0E9f2=%"%k%4%j%:%`$H!"80$J$I$K;H$o$l$k%O%C%7%e%"%k%4%j%:%`$rA*Br$9$k!#FC$KM}M3$,$J$$8B$j$O!"I8=`$GA*Br$5$l$F$$$k!H(BAES$B!J(BAdvanced Encryption Standard$B!K!I$H!H(BRIPEMD-160$B!I$GLdBj$,$J$$$@$m$&!#(B

$B!!A*Br$G$-$k%O%C%7%e4X?t$O(B Whirlpool$B!"(BSHA-1$B!"(BRIPEMD-160 $B$N(B 3 $B$D!#(B $B4XO"(B:
- $B%O%C%7%e4X?t(B Whitepool, RIPEMD-160 $B$N6/EYI>2A$H(B SHA-1 $B$N2~NIJ}K!$N5;=QD4::Js9p(B ($BF|N)@=:n=j(B / NICT $B%;%-%e%j%F%#4pHW%0%k!<%W(B$B!"(B2006.02.27)
- The Hash Function Lounge (Paulo Barreto's Crypto Page)
- NIST$B!$?7%O%C%7%e4X?t%"%k%4%j%:%`$N8xJg%3%s%F%9%H$r3+:E$X(B ($BF|7P(B IT Pro, 1/25)
$B!U(B $B:G$b6/$$1F6A$rM?$($?%V%i%s%I$K(BGoogle$B!=!=JFD4::(B (ITmedia, 1/27)$B!#$3$l!"(Bbrandchannel.com $B$N(B Reader's Choice Awards $B$G$9$M!#Jl=8CD$,$I$N$h$&$KJP$C$F$k$N$+$5$C$Q$j$o$+$i$J$$$N$G!"$V$C$A$c$1L50UL#$J$N$G$O!#(B

$B!U(B Google$B!"%0!<%0%kGzCF$NBP:v$rI=L@(B (ITmedia, 1/27)$B!#(B $B4XO"(B: Google bomb (Wikipedia)

$B!U(B NEC$B!"(BIP$BEEOC$rMQ$$$?%9%Q%`$rKI;_$9$k5;=Q!]8!=PN($O!H(B99$B!s!I(B (Enterprise Watch, 1/26)

NEC$B%h!<%m%C%Q%M%C%H%o!<%/8&5f=j$G:n@.$7$?(BSPIT$B%5%s%W%k$rMQ$$$?7bB`%7%e%_%l!<%7%g%s$G$O!"(B99$B!s$N(BSPIT$B$r8!CN!&
$B!U(B $B%U%l%C%D$N(BIPv6$BMxMQ (Internet Watch, 1/26)

$B%U%l%C%D$N(BIPv6$B%5!<%S%9$G$O!"3d$jEv$F$i$l$k(BIPv6$B%"%I%l%9$O%U%l%C%DLVFb$G$NMxMQ$rA0Ds$H$7$F$$$k$?$a!"30It$K$O@\B3$G$-$J$$!#0lJ}!"(B Windows Vista$B$G$O!"@\B3@h$N%5%$%H$,(BIPv6$B$H(BIPv4$B$NN>J}$KBP1~$7$F$$$k$H!":G=i$K(BIPv6$B$G$N@\B3$r;n$_$F!"Ls(B20$BICBT$C$F@\B3$G$-$J$+$C$?>l9g$K(B IPv4$B$G$N@\B3$r9T$J$&!#$3$N$?$a!"(BIPv6$B$H(BIPv4$B$NN>J}$KBP1~$7$F$$$k%5%$%H$N>l9g$K$O!"(BIPv6$B$G$N@\B3$,$G$-$J$$$?$a$K%5%$%H$NI=<($^$G$K;~4V$,$+$+$k!V(BIPv6-IPv4$B%U%)!<%k%P%C%/!W$NLdBj$,H/@8$9$k!#(B

$B!!!V%U%l%C%D$N(BIPv6$B%5!<%S%9$G$O!"3d$jEv$F$i$l$k(BIPv6$B%"%I%l%9$O%U%l%C%DLVFb$G$NMxMQ$rA0Ds$H$7$F$$$k!W$H$$$&ItJ,$,%A%s%+%9$J$@$1$J$s$G$9$1$I$M!#(B

$B!U(B $B85O*%9%Q%$;&32!"!V%k%4%\%$;a4XM?!W%m%s%I%s7Y;kD#CGDj(B ($B;:7P(B, 1/27)$B!"(B $B%m85%9%Q%$JQ;`$X$N4XM?EA$($i$l$?%k%4%\%$;a!"LTH?H/(B (CNN, 1/28)$B!"(B $B85%9%Q%$FG;&!"1QEv6I$,5/AJCGG0$+!&1Q;f(B ($BF|7P(B, 1/28)

$B!U(B The certification password of Internet Explorer 7 and operation of auto complete $B!#(B IE $B$N%*!<%H%3%s%W%j!<%H(B / $B%Q%9%o!<%IJ]B85!G=(B$B$@$,!"(B $B%G!<%?J]B87A<0$,(B IE 7 $B$G$,$i$C$HJQ$o$C$?$N$@$=$&$@!#(B $B$3$l$rFI$_=P$9J}K!$K$D$$$F5-:\$5$l$F$$$k!#(B

$B!U(B $B!T(B ESPIO! $B!UD;1[=SB@O:;a$N%&%=$HWx3e!"$D$$$K2;@<%U%!%$%k$r8x3+!*(B (1/26)

$B!U(B $B$+$_9g$o$J$$O@Ah$G$NH/8@$N??0U$rA[A|$9$k(B ($BF|7P(B IT Pro, 1/26)$B!#(B $B%M%C%H;~Be$NH?O@=Q(B$B$NOC!#(B $B=q@R$N2r@b%Z!<%8$K$O!VO@@oI,>!$N%3%D$rEA$B%M%C%H#v#s!%%j%"%k$N>WFM(B$B$N!VC/$,%&%'%V(B 2.0 $B$r@)$9$k$+!W$H$$$$!"(B $BJ8=U?7=q$K$O%:%l$?%5%V%?%$%H%k$d@bL@$r$D$1$?$,$k?M$,$$$k$N$@$m$&$+!#(B

$B"#(B $B$$$m$$$m(B (2007.01.29)
(various)

iDefense Security Advisory 01.26.07: Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability$B!#(B libchm 0.39 $B$GD>$C$F$$$k$=$&$G$9!#(B
Internet Explorer ActiveX bgColor Property DoS (securiteam)
[SA23862] Microsoft Help Workshop Two Buffer Overflow Vulnerabilities$B!#(B.CNT $B$H(B .HPJ $B%U%!%$%k$N07$$$K7g4Y!#(B CVE-2007-0427 (.HPJ $B%U%!%$%k(B)

$B"#(B $BDI5-(B

JVN#32985115: Movable Type $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H: $B!!(B Movable Type <= 3.33 XSS Exploit

$B"#(B 2007.01.28

$B!U(B $B%^%K%e%U%!%/%A%c%j%s%0!&%3%s%;%s%H(B
- $B%A%g%`%9%-!<$H%a%G%#%"(B -- $B%^%K%e%U%!%/%A%c%j%s%0!&%3%s%;%s%H(B -- (SIGLO)$B!#1G2h$NOC!#(B 2/17 $B$+$i(B$B%f!<%m%9%Z!<%9$G%m!<%I%7%g!<(B$B$@$=$&$G$9!#(B $B?7$7$/FI$_$d$9$$;zKk$,$D$$$F$$$k$=$&$G$9!#(B
- $B%^%K%e%U%!%/%A%c%j%s%0!&%3%s%;%s%H!!%^%9%a%G%#%"$N@/<#7P:Q3X(B$B!#(B $B$3$A$i$O=q@R$NOC!#(B
$B!!=q@R$K$D$$$F$O$H$j$"$($:H/Cm$7$F$_$?!#(B
$B!U(B $B%;%-%e%j%F%#6/EY$rBh;0 ($BF|7P(B IT Pro, 1/24)$B!#(B $B%;%-%e%j%F%#5!G=$r6/2=$7$?>.7?(BA3 $B%+%i!<(BLED$B%W%j%s%?!V(BC8800dn$B!W$r?7H/Gd(B $B!A(BISO/IEC 15408($B%3%b%s%/%i%$%F%j%"(B)$B$KBP1~!A(B ($B2-%G!<%?(B, 1/24) $B$K$h$k$H(B EAL3 $B$N
$B!U(B $BLxBt8|O+Aj!V5!3#!WH/8@!"LnE^$,0l@FHcH=!D<-G$MW5a$b(B ($BFIGd(B, 1/28)$B!#(B $B0BG\Fb3U$C$FOCBj$,?T$-$^$;$s$M!#(B $B$=$&$$$($P!"(B$B%^%8%s%5!<%,(B$B$K$=$s$J>lLL$,$"$j$^$7$?$M$(!#(B
$B!U(B $BJF9q!'%_%5%$%k7^7be$G(B ($BKhF|(B, 1/28)$B!#(BTHAAD $B$N
$B!U(B $B%,%;$M$?$,$"$k$"$k(B
$B!U(B $BKI1R>J(B $B%5%$%P!<967b$KBP=h$9$k!V%M%C%H%o!<%/1?MQBb!W(B ($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 1/27)
$B!U(B $BL)9p5AL3K!$N!VF|@Z$lK!0F!W07$$$O$*$+$7$$(B ($BJ]:dE8?M$N$I$3$I$3F|5-(B, 1/27)
$B!U(B $BJF9qKIAm>J!"%^%9%3%_4X78 (technobahn, 1/26)$B!#Hs;&=}J<4o$M$?!#(B
$B!U(B NHK $B%G!<%?J|Aw(B

$BCO?L$dDEGH$N>pJs$O!"J|Aw$r8+F($7$F$7$^$&$H!"$"$H$+$i3NG'$9$k$3$H$O=PMh$^$;$s$G$7$?!#:#2s%9%?!<%H$7$?!VCO?L!&DEGH>pJs!W%G!<%?J|Aw$G$O!"?LEY$dDEGH$NM=A[E~C#;~9o$J$I$N>pJs$r4JC1$K3NG'$9$k$3$H$,=PMh$^$9!#$^$?!"#B#S#h#i!"%G%8%?%kAm9g$G$O!"CO?L$,5/$-$?$H$-$K<+F0E*$K%G!<%?J|Aw$rI=<($9$k$h$&$K!"$"$i$+$8$a@_Dj$9$k;v$,$G$-$^$9!#>\$7$/$O(B$B$3$A$i(B$B!#(B

$B!!$X$'!#CN$i$s$+$C$?!D!D(B
$B!U(B Malware author wants to gain attention via Windows Live Messenger password stealer (SANS ISC, 1/26)
$B!U(B The Google blacklist (avertlabs.com, 1/25)

On his blog, Michael Sutton who analyzed this link, explains it is used by the Google Safe Browsing for Firefox extension which is now part of the Google Toolbar for Firefox.

$B"#(B $B$$$m$$$m(B (2007.01.28)
(various)

Mac OS X $B4XO"$M$?(B
- [SA23796] Apple Mac OS X slpd Buffer Overflow Vulnerability$B!#(B MoAB #17$B!"(B CVE-2007-0355
- [SA23823] Apple Mac OS X "shared_region_map_file_np()" Denial of Service$B!#(B local DoS $B$M$?!#(B
- [SA23861] Transmit "sftp://" URI Handler Buffer Overflow$B!#(B Transmit 3.5.5 $B$K$*$1$k(B sftp:// URI $B$N=hM}$K7g4Y$,$"$j!"G$0U$N%3!<%I$rMoAB #19$B!"(B CVE-2007-0020$B!#(B Transmit 3.5.6 $B$G=$@5$5$l$F$$$k$h$&$@!#(B
- [SA23793] Apple Mac OS X "/sbin/service" Weakness$B!#(B local user $B8"8B>e>:$M$?!#(B MoAB #21$B!"(BCVE-2007-0022
- [SA23846] Apple Mac OS X "UserNotificationCenter" Privilege Escalation$B!#(B local user $B8"8B>e>:$M$?!#(B MoAB #22$B!"(B CVE-2007-0023
- [SA23859] Apple Mac OS X QuickDraw Denial of Service$B!#(B PICT $B%U%!%$%k$G(B DoS$B!#(B MoAB #23$B!"(BCVE-2007-0462
APPLE-SA-2007-01-25 AirPort Extreme Update 2007-001$B!#(B $B%@%&%s%m!<%I(B$B!#(B CVE-2006-6292
[Full-disclosure] PHP 5.2.0 safe_mode bypass (by Writing Mode)
Medium Risk Vulnerability in PGP Desktop$B!#(B PGP Desktop 9.5.1 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B
RubyGems 0.9.0 and earlier installation exploit $B!#(BRubyGems 0.9.0 $BMQ$N(B patch $B$,E:IU$5$l$F$$$k!#(B $B$^$?(B RubyGems 0.9.1 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B CVE-2007-0469
Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux$B!#(BPoC $B%3!<%I$D$-!#(B $B:G?7%P!<%8%g%s$G$"$k(B InterScan VirusWall 6 $B$K$O4X78$J$5$=$&!#(B
[SA23900] Sun Ray Server Software Password Disclosure $B!#(Bpatch $B$,$"$k$=$&$G$9!#(B CVE-2007-0482
[CAID 34993]: CA BrightStor ARCserve Backup for Laptops and Desktops Multiple Overflow Vulnerabilities$B!#(B Windows $BHG$N(B BrightStor ARCserve Backup for Laptops and Desktops 11.x $B$J$I$K!"(Bremote $B$+$i(B local SYSTEM $B8"8B$rCVE-2007-0449
ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability$B!#(B patch $B$,$"$k$=$&$G$9!#(B CTX111686 - Vulnerability in Citrix Presentation Server's print provider could result in arbitrary code execution (Citrix) $B$r;2>H!#(B CVE-2007-0444
[CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities $B!#(BCA Personal Firewall 2007 (v9.0) Engine version 1.0.173 $B0JA0$K7g4Y$,$"$kLOMM!#(B2007.01.22 $B$N<+F099?7(B (Engine version 1.0.176) $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B CVE-2006-6952
Weaknesses in Pingback Design$B!#(B Pingback $B$r;H$C$F(B DoS $B$G$-$k$H$$$&OC$+$7$i!#(B
Multiple Remote Vulnerabilities in Wordpress$B!#(B Weaknesses in Pingback Design $B$G<($5$l$k967b$N1F6A$r
[SA23908] Drupal Project Module Script Insertion Vulnerability
[SA23887] Drupal Project Issue Tracking Module Multiple Vulnerabilities
[SA23884] GTK+ "GdkPixbufLoader()" Denial of Service$B!#(B GTK+ 2.x $B$,BP>]$H$5$l$F$$$k!#(B RHSA-2007:0019-3 $B$,85$M$?$@$=$&$@!#(B CVE-2007-0010
[SA23847] Check Point Products ICS Security Bypass$B!#(B Connectra $B$H(B VPN-1 $BMQ$N(B patch $B$,=P$F$$$k$=$&$@!#(B
EEYEB-20070119_1: A flaw exists within Windows Vista that allows local privilege escalation to SYSTEM (eEye)$B!#$b$A$m$s(B patch $B$O$^$@$J$$!#(B
EEYEB-20070119_2: A flaw exists within Sun JRE which allows for remote execution of arbitrary code with minimal user interaction (eEye)$B!#$b$A$m$s(B patch $B$O$^$@$J$$!#(B

2007.02.03 $BDI5-(B:

$B!!(BBrightStor ARCserve Backup $BOC(B:

Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup (NGS Software, 2007.01.31)
Remote Unauthenticated Code Execution II CA BrightStor ARCserve Backup for Laptops & Desktops (NGS Software, 2007.01.31)
Remote DOS BrightStor ARCserve Backup for Laptops & Desktops (NGS Software, 2007.01.31)
Remote Unauthenticated Resource Exhaustion CA Mobile BackupService (NGS Software, 2007.01.31)

$B"#(B 2007.01.27

$B!U(B $B%"%Q%[%F%k$GBQ?L56Au(B$B!#$7$+$7OC$O$=$l$@$1$G$OG<$^$i$J$$2DG=@-$"$j!#(B
- $B%"%Q%[%F%k$GBQ?L56Au!!5~ET$N#2Eo!";HMQ6X;_$K(B (asahi.com, 1/25)
  $B$$$:$l$bEDB
  $B%"%Q!"5~ET$N%[%F%k2~=$$X!!BQ?L6/EY56Au(B (asahi.com, 1/26)
  $B9qEZ8rDL>J$O#2#5F|!"$3$N7zC[;N$,4XM?$7$?7zJ*$N$&$AL$D4::$N#1#2#67o$ND4::$r4X78<+<#BN$KMW@A$9$k$H$H$b$K!"4XM?$rGD0.$7$F$$$kA4#1#6#87o!"ETF;I\8)JL7o?t$r8xI=$7$?!#(B
  
  $B!J3t!KEDB ($B9qEZ8rDL>J(B, 1/25)
  $BBQ?L56Au$GJ*7oD4::!"3F<+<#BN$"$?$U$?!!:n6HKDBg(B (asahi.com, 1/26)
  $B56Au%[%F%k!"@_7WJQ99$N=qN`L$Ds=P!!5~ET;T$,N)$AF~$j%X(B (asahi.com, 1/26)
  $B?eMn7zC[;N!!9=B$7W;;=q!V2~$6$s$H8@$o$l$?$i$=$&!W(B (asahi.com, 1/26)
  $B%"%Q%[%F%k#2Eo!"2Y=E$r4p=`CM$NH>J,$G;;=P!!5~ET;TD4$Y(B (asahi.com, 1/27)
$B!!4XO"(B: $B8!>Z!&BQ?L56Au!!0-$$$N$OC/$+!)2?$+!)!J#5!KF#ED (JANJAN, 1/26)$B!#!V(B $B7n$K6A$/E+(B $BBQ?L56Au(B$B!W$NOC!#=q@R>R2p$h$j(B:
$B!ZK\=q$+$i$NH4?h![(B
P.380$B$h$j(B

$B#2#0#0#6G/#27n#1#4F|$4$m!"%$!<%[!<%`%:$G$O4{$K
$K$b$$$k!W$H!">Z8@$7$?$H$$$&!#$7$+$7!"8=
$B!!(BJANJAN $B5-;v$h$j(B:

$B!!:rG/!"Jk$l$b$*$7$D$^$C$?#1#27n#2#5F|$KH/9T$5$l$?$3$NK\$O!"Ev=iJ8i:=U=) $B!!Cf;_$5$l$?M}M3$O!"!J#0#6G/#67n$KD+F|?7J9$,JsF;$7$?!K%"%Q%0%k!<%W$,:n$C$?%^%s%7%g%s$N!V9=B$7W;;=q$N56Au!W$K4X$9$k5-=R$r:o=|$9$k$+!"56Au$r9q$d9T@/$,G'$a$?8e$G$J$1$l$P=PHG$9$k$3$H$O$G$-$J$$$H$$$&$3$H$@$C$?!#(B

$B!!J8i:=U=)
$B!!$5$i$K4XO"(B:
- $B!X7n$K6A$/E+!!BQ?L56Au!Y7G<(HD(B
- $B$-$C$3$NF|5-(B 2007/01/27 ($BEZ(B) $BE72<8fLH$NFsKg@e(B
- $B4hD%$lF#EDEl8c(B($B%$!<%[!<%`%:F#EDEl8c
- $B%"%Q%0%k!<%W$N9=B$7W;;56B$LdBj(B ($BEl5^ITF0;:El5^%j%P%V%kITGc1?F0(B)
$B!U(B Chat with "Corpse" (F-Secure blog, 1/26)
$B!U(B $BD;%$%s%U%k%(%s%6J}LL(B

$B5\:j!&F|8~;T$ND;%$%s%U%k!"@6IpD.$HF1$8#H#5#N#17?(B ($BFIGd(B, 1/27)
$B2,;3$G$bD;%$%s%U%k$+!!4J0W8!::$G#71)M[@-(B (asahi.com, 1/27)
$B!U(B $BKhF|?7J9O":\!V%M%C%H7/NW!W$G9M$($k (CNET, 1/25)$B!#Ev3:5-;v$O(B $B$3$A$i(B$B$r;2>H!#(B

$B!U(B $B%9%Q%$%&%(%"BP93CDBN(BASC$B$,%9%Q%$%&%(%"FCDj$N%Y%9%H!&%W%i%/%F%#%9$r8x3+(B ($BF|7P(B IT Pro, 1/26)

$B!U(B $B!V(BVista$B$N%9%Q%$%&%(%"BP:v%=%U%H$O8!=PO3$l(B84$B!s!W!$(BWebroot$B$ND4::(B ($BF|7P(B IT Pro, 1/26)$B!#$A$J$_$K(B Webroot $B$N(B Spy Sweeper 5.0 $B$O(B PC MAGAZINE Editor's Choice $B$K$J$C$F$^$9$M!#(B antispyware (PC MAGAZINE) $B$b;2>H!#(B $B$"$H!"(BWindows Defender (beta 2) $B$O(B PC MAGAZINE $B$G$O(B $B$3$s$JI>2A(B$B$G$7$?!#(B

$B"#(B $BDI5-(B

$B%U%l%C%7%e%j!<%@!<$N@H

$B!!(B [$B=EMW(B] Sage++ (Higmmer's Edition)$B$N@HpJs$K4X$7$F!"$*OM$S$H ($B$R$0$^$N$R$^%0(B, 2007.01.25)$B!#(B

$B0J>e$N$3$H$+$i!"(BFirefox$B$N3HD%5!G=!V(BSage 1.3.x$B!W!V(BSage 1.4$B!W5Z$S!V(BSage++ (Higmmer's Edition)$B!W$O$^$5$K!VHs>o$K4m81$J!W3HD%5!G=$N$R$H$D$G$"$j!"8=;~E@$G$O0lHL%f!<%6!<$,5$7Z$K;HMQ$9$k$3$H$r?d>)$G$-$k%=%U%H%&%'%"$G$O$J$$$H8@$o$6$k$rF@$^$;$s!#$4;HMQ$K$"$?$C$F$O$=$N%a%j%C%H!&%G%a%j%C%H$r$h$/9MN8$N>e!"3F<+$N!V<+8J@UG$!W(B($BK\Mh$3$N8@MU$O$"$^$j9%$-$G$O$J$$$N$G$9$,(B)$B$N85$K$*$$$F;HMQ$r7QB3$9$k$J$j!"Cf;_$9$k$J$j$N$4H=CG$r$7$FD:$-$?$$$H;W$$$^$9!#(B

$B!!4XO"(B: [$B=EMW(B] Sage++ (Higmmer's Edition)$B$N@HpJs$K4X$7$F!"$*OM$S$H ($BMU$C$QF|5-(B, 2007.01.26)

Sage 1.4$B$N@H
$B!!(B0-day $B$G$P$i$7$A$c$&?M$,$=$&$$$&$3$H$r$9$k$H$O;W$($J$$$1$I$J$"!#(B

Cisco vulnerabilities

$B!!4XO">pJs$rDI2C$7$?!#(B

$B"#(B $B$$$m$$$m(B (2007.01.27)
(various)

SYM07-001: Symantec Web Security $B$KJ#?t$N@H (2007.01.24)$B!#(BSymantec Web Security 3.0.1.85 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B
JVN#93700808: Sleipnir $B$N(B RSS$B%P!<$K$*$1$k%;%-%e%j%F%#%>!<%s$N07$$$K4X$9$k@H (2007.01.26)$B!#(BSleipnir 2.5 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B
JVN#64354801: b2evolution $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H (2007.01.26)$B!#(Bb2evolution 1.8.7 / 1.9.2 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B b2evo 1.8.7 AND 1.9.2 released! (b2evolution.net) $B$h$j(B:

They both include additional security enhancements over the previous versions.
Although the addressed issues are not very likely to be exploited in a meaningful way, we still recommend that you upgrade for maximum security.
WebFORM $BOC!#(B
WebFORM 4.4 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B Web $B%a!<%i!<(B $B$K$bF1$8LdBj$,$"$C$F!"(B Web $B%a!<%i!<(B 1.02 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B
JVN#82258242: $B%7%g%C%T%s%0%P%9%1%C%H%W%m$K$*$1$k(B OS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H (2007.01.25)$B!#(B $B%7%g%C%T%s%0%P%9%1%C%H%W%m(B 7.51 $B$G=$@5$5$l$F$$$k(B$B$=$&$G$9!#(B

$B"#(B $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (932114) Microsoft Word 2000 $B$N@H
(Microsoft, 2007.01.27)

$B!!(BWord 2000 $B$K(B 0-day $B7g4Y!#(B Word $BJ8=q$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,(B Word $BJ8=q$K$h$C$FG$0U$N%3!<%I$rCVE-2007-0515

$B!!4XO"(B:

2007.02.08 $BDI5-(B:

$B!!(B Microsoft Word 2000 Unspecified Code Execution Vulnerability Exploit (0-day) (milw0rm)

$B"#(B 2007.01.26

$B!U(B NOD32$B%"%s%A%&%$%k%9(B V2.7$B$X$N%W%m%0%i%`%"%C%W%G!<%H$r3+;O$7$^$7$?(B ($B%-%d%N%s%7%9%F%`%=%j%e!<%7%g%s%:(B, 1/24)
$B!U(B $BCx:n8"4XO"(B
- $B!VCx:nJ*$NMxMQ5vBz!"%M%C%H$G4J0W$K!W!!Cx:n8"J]8n4|4V1dD9GI$,7W2h(B (ITmedia, 1/25)
  $BF|K\:n;l2H6(2q$N$$$G$O$/M};v$O(B ($BCfN,(B) $B!V(B50$BG/$G==J,J]8n$7$F$$$k$@$m$&$H$$$&0U8+$O!":n$C$?B&$,8@$&$J$iG $B;H$&B&$N?M$O8"Mx4|4V$K$D$$$FH/8@$7$F$O$$$1$J$$$s$@$=$&$G$9!#(B
  $BHVAH0cK!%3%T!<$N%*!<%/%7%g%s=PIJ!"%F%l%S6I$H(BACCS$B$,4F;k6/2=(B (ITmedia, 1/25)
  YouTube$B44It$,(B2$B7n$KMhF|!"9qFb8"Mx (ITmedia, 1/25)
  [DJ] Fox$B!"(BYouTube$B$K%f!<%6!<>pJs3+<(5a$a$k(B (ITmedia, 1/26)
$B!U(B Windows XP Home$B$N%5%]!<%H1dD9(B? (slashdot.jp, 1/24)$B!#(B#1097996 $B$K$6$V$H$s(B 3 $BKg(B!
$B!U(B $B:#$G$O9M$($i$l$J$$$*$b$A$c!V86;RNO%(%M%k%.!< (technobahn, 1/25)$B!#$$$d!<$d$C$Q$j(B USA $B$O$9$2$(!#$5$9$,$O(B $B%-%c%W%F%s!&%U%e!<%A%c!<(B$B$r;:$_=P$7$?9q$@(B ($B%-%c%W%F%s$OAG$B1'Ch<|?MA%$NH?Mp(B$B$@$C$?$+$J!#IpM&EAIpM&EA(B)$B!#(B

$B!!$^$"$7$+$7!"!V:#$+$i;W$($P!W$O@$$NCf$K$?$/$5$s$"$k$o$1$G!#(B$B:G=i$N%3%+!&%3!<%i$N@.J,(B$B$H$+!#(B

$B"#(B 2007.01.25

$B!U(B $B$?$N$7$$(B google XX
- $B>pJsA`:n!)(BGoogleMap$B$N%S%U%)%"!&%"%U%?!<(B (technobahn, 1/24)
- $B%0!<%0%k!"%$%.%j%973$+$i$NMWK>$K1~$8$F%$%i%/$NCO?^$r=$@5(B (technobahn, 1/24)
- GoogleEarth$B$G$OB8:_$7$J$$$3$H$K$J$C$F$$$^$9(B (technobahn, 1/24)
$B!!(Bgoogle XX $B$G$O9-HF$J>pJsA`:n$,9T$o$l$F$$$k$h$&$G$9$M!D!D!#(B $BB?J,!"(BMicrosoft $B$J$IB>
$B!U(B $B2C32 (Semplice, 1/23)$B!#%^%C%A%]%s%W$G$9$M!D!D!#(B
$B!U(B Internet Week 2006 $B$N(B$B%A%e!<%H%j%"%k;qNA(B$B$,8x3+$5$l$F$^$9$M!#(B
$B!U(B FIX: When you run Windows Update to scan for updates that use Windows Installer, including Office updates, CPU utilization may reach 100 percent for prolonged periods (Microsoft) $B$N(B patch $B$r$"$F$k$H(B access violation $B$,H/@8$9$k$3$H$,$"$k$=$&$J(B:
- You receive an access violation when you try to install an update from Windows Update after you apply hotfix package 916089 (Microsoft)
$B!!BP1~$9$k$K$O!"$5$i$KJL$N(B patch $B$r$"$F$k$N$@$=$&$G!#(BYou need one more PTF $B$N@$3&$@$J$"!#(B
$B!U(B $BL11D2=$7$?@oAh!'!X@oAh@AIi2q (JANJAN, 1/25)$B!#(B $BL14V73;v2q$B$M$?!#(B $BL14V$G$G$-$k;v$OL14V$G(B (C) $B>.@t=c0lO:!#(B
$B!U(B $B7HBS(B3$B (ITmedia, 1/24)
$B!U(B $BCN$C$F$*$-$?$$!*%7%9%F%`>c32;~$K;H$&1Q8l(B Part4$B!!Ld$$9g$o$;JT(B ($BF|7P(B IT Pro, 1/25)
$B!U(B Share$B%M%C%H%o!<%/2D;k2=%7%9%F%`!V(BSharebot$B!W$N;EAH$_$H1?MQJ}?K(B ($BF|7P(B IT Pro, 1/24)
$B!U(B $BJ]:dE8?M$N$I$3$I$3F|5-(B$B$+$i(B:
- $B0BG\@/8"$N>G$j$H650i:F@82q5D$X$N5?Ld(B (1/23)
- $B6&KE:a!"!VF|BX$o$jLBAv!W$r@8$s$@K!L3>J$N:.Mp(B (1/24)
- [$B=EMW;qNA(B]$B6&KE:a!&L)9p5AL3K!$O%a%?%k$NI=N"(B $B3$EOM:0lJ[8n;N(B (1/24)
  $B!V6&KE:a!W$OLBAvCf$@$,!"!VL)9p5AL3K!!W$O<@AvCf$G!"$3$N$^$^OCBj$K$J$i$J$1$l$P(B3$B7nKv$K$O!V@.N)!W$9$k8+9~$_$G$"$k!#6&KE:a$b$*$=$m$7$$$,!"%a%?%k$NI=N"$N$h$&$J4X78$K$"$k!VL)9p5AL3K!!W$O7P:Q
$B!!4XO"(B:
- $B%/%m!<%:%"%C%W#2#0#0#7!'$I$&$J$k6&KE:a!!;vA0=hH3$K:,6/$$HcH=!" ($BKhF|(B, 1/24)
- $B!V%$%i%/3+@o$O4V0c$$!WH/8@$OGHLf$r8F$V$I$3$m$+(B (JANJAN, 1/25)
$B!U(B $B>pJs$O(B*$B?M(B*$B$rG^2p$K$7$FEA$o$C$F$$$/(B (Microsoft)$B!#GXCf$G8l$k(B$B%A!<%`%A%I%j(B$B$N$_$J$5$s$N
$B!U(B $B@8BN>pJs$rI|85$G$-$J$$7A$KJQ49$7$FEPO?!&>H9g$r9T$&@8BNG'>Z5;=Q$r3+H/!!(B $B@8BN>pJs$NO3$($$KI;_5!G=$r6/2=(B ($BF|N)(B, 1/23)

$BK\FbMF$K4X$7$F!"(B2007$BG/(B1$B7n(B23$BF|$+$i(B26$BF|$^$GD9:j8):4@$J];T$G3+:E$5$l$k!V0E9f$H>pJs%;%-%e%j%F%#%7%s%]%8%&%`(B(SCIS2007)$B!W$K$*$$$FH/I=$9$kM=Dj$G$9!#(B

$B!!(BSCIS2007 $B%W%m%0%i%`(B$B$N$I$l$@$m$&!D!D!#!V(B3F4-3 $B%;%-%e%"$J%j%b!<%H@8BNG'>Z%W%m%H%3%k$NDs0F!W$+$J$"!#(B
$B!U(B Windows XP Home Edition$B$N%5%]!<%HDs6!4|4V$r(B2014$BG/(B4$B7n$^$G1dD9(B (Microsoft, 1/25)$B!#(BXP Home $B$H(B XP Media Center $B$K(B 5 $BG/$N1dD9%5%]!<%H$,Ds6!$5$l!"(BXP Pro $B$HF1Ey$N%5%]!<%H4|4V$H$J$C$?LOMM!#4XO"(B:
- $B%^%$%/%m%=%U%H!"(BXP$B$N%5%]!<%H4|4V$r(B2014$BG/$^$G@5<01dD9(B $B!A%8%'%$%_%=%sK\ItD9$K7P0^$rJ9$/(B (PC Watch, 1/25)
- XP Home$B$N%5%]!<%H4|8B1dD9$rH/I=!!(BMS$B!"A4@$3&$G(B (ITmedia, 1/25)

$B"#(B $BDI5-(B

Apple QuickTime RTSP URL Handler Vulnerability

$B!!(BWindows $B$G(B Apple Software Update $B$r;H$C$F(B Security Update 2007-001 $B$rE,MQ$9$k$H!"0J2<$,99?7$5$l$k$_$?$$!#(B

C:\Program Files\QuickTime\QuickTimePlayer.exe
C:\Program Files\QuickTime\QTSystem\QuickTime.qts
C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.qtx

$B!!99?78e$N(B QuickTimePlayer.exe $B$N(B digital signature $B$O$3$s$J46$8(B:

MD5: 3C4BB567B36ED1F671FAF6DC41472D77
SHA1: C8F7D0071599EAAD45A01A69802B79E6C76201F9

$B!!(BQuickTimePlayer $B$N%P!<%8%g%s<+BN$O(B 7.1.3.90 $B$N$^$^$@$C$?!#(B

$B"#(B $B%U%l%C%7%e%j!<%@!<$N@H
($B$R$0$^$N$R$^%0(B, 2007.01.18)

$B!!?M@8$$$m$$$m!"3+H/

JPCERT/CC$B$+$i$NO"Mm$K$h$k$H$3$N@H
$B!!%*%j%8%J%k$N(B Sage 1.3.9 $B$rMxMQ$7$F$$$k?M$bCm0U$7$^$7$g$&!#(B

2007.01.27 $BDI5-(B:

$B!!(B[$B=EMW(B] Sage++ (Higmmer's Edition)$B$N@HpJs$K4X$7$F!"$*OM$S$H ($B$R$0$^$N$R$^%0(B, 2007.01.25)$B!#(B

$B0J>e$N$3$H$+$i!"(BFirefox$B$N3HD%5!G=!V(BSage 1.3.x$B!W!V(BSage 1.4$B!W5Z$S!V(BSage++ (Higmmer's Edition)$B!W$O$^$5$K!VHs>o$K4m81$J!W3HD%5!G=$N$R$H$D$G$"$j!"8=;~E@$G$O0lHL%f!<%6!<$,5$7Z$K;HMQ$9$k$3$H$r?d>)$G$-$k%=%U%H%&%'%"$G$O$J$$$H8@$o$6$k$rF@$^$;$s!#$4;HMQ$K$"$?$C$F$O$=$N%a%j%C%H!&%G%a%j%C%H$r$h$/9MN8$N>e!"3F<+$N!V<+8J@UG$!W(B($BK\Mh$3$N8@MU$O$"$^$j9%$-$G$O$J$$$N$G$9$,(B)$B$N85$K$*$$$F;HMQ$r7QB3$9$k$J$j!"Cf;_$9$k$J$j$N$4H=CG$r$7$FD:$-$?$$$H;W$$$^$9!#(B

$B!!4XO"(B: [$B=EMW(B] Sage++ (Higmmer's Edition)$B$N@HpJs$K4X$7$F!"$*OM$S$H ($BMU$C$QF|5-(B, 2007.01.26)

Sage 1.4$B$N@H
$B!!(B0-day $B$G$P$i$7$A$c$&?M$,$=$&$$$&$3$H$r$9$k$H$O;W$($J$$$1$I$J$"!#(B

2007.01.30 $BDI5-(B:

$B!!(Bsage 1.3.10 $B$,=P$?$h$&$G$9!#(B

Sage 1.3.10 Released (sage.mozdev.org)
Bugzilla Bug 16320: content filter exploit (mozdev.org)$B!#(BAs reported by JPCERT/CC: $B$H$"$k$N$G!"$=$NOC$N$h$&$G$9!#(B

$B!!$3$l$K$"$o$;$F!"(BSage++ (Higmmer's Edition) 1.3.10 $B$bEP>l$7$F$$$^$9!#(B

[$B=EMW(B] Sage++ (Higmmer's Edition) 1.3.10 $B%j%j!<%9(B ($B$R$0$^$N$R$^%0(B)

$B!!$^$?!"(B[$B=EMW(B] Sage++ (Higmmer's Edition)$B$N@HpJs$K4X$7$F!"$*OM$S$H $B$,2CI.$5$l$F$$$^$9!#(B

(1/30$BDI5-(B) $B>e5-(BFail$B9`L\$NFb!"!V(BNon-Alpha-Non-Digit$B!W!V(BEvade_Regex_Filter2$B!W$K$D$$$F$O8x<0HG(BSage 1.3.10$B$G=$@5$5$l$?$3$H$r3NG'$7$^$7$?!#$7$+$7!";D$k!V(BDouble_open_angle_brackets$B!W$K$D$$$F$OL$$@$K=$@5$5$l$F$$$J$$LOMM$G$9!#>\$7$/$O$3$A$i$N%(%s%H%j$r;2>H$7$F2<$5$$!#>0!"@[:n$N(BSage++ 1.3.10$B$G$O9bB.(BHTML$B%U%#%k%?$,;HMQITG=$K$J$C$F$*$j!">e5-@H
$B!!$H$$$&$o$1$G!"(BSage 1.3.10 $B$K$O$^$@LdBj$,;D$C$F$$$k$h$&$G$9!#(B $BMxMQ
$B!!$=$&$@$5$s!"9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

2007.02.09 $BDI5-(B:

$B!!4XO"(B:

JVN#84430861: Sage $B$K$*$$$FG$0U$N%9%/%j%W%H$, (JVN, 2007.02.09)
Firefox/Sage++ (Higmmer's Edition) $B8x3+!*(B ($B$R$0$^$N$R$^%0(B)
2007$BG/(B2$B7n(B4$BF|$r$b$C$F8x3+Dd;_$7$^$7$?(B $BD9$i$/$N$40&MQ$"$j$,$H$&$4$6$$$^$7$?(B

$B!!(BJVN $B$G$O(B

2007/02/09 $B8=:_!"(BSage++ $B$N8x3+$*$h$S%"%C%W%G!<%H$ODd;_$5$l$F$$$^$9!#(BSage++ $B%f!<%6$O(B Sage $B$N:G?7HG$rMxMQ$9$k$3$H$r?d>)$7$^$9(B

$B$H$J$C$F$$$k$,!"(B [$B=EMW(B] Sage++ (Higmmer's Edition) 1.3.10a $B:G=*%j%j!<%9(B ($B$R$0$^$N$R$^%0(B) $B$J$I$K$h$k$H!"(BSage 1.3.10 $B$K$O(B ($BJ#?t$N(B?) $B7g4Y$,;D$C$F$$$k$h$&$G$9!#(B $B$4Cm0U$r!#(B

$B"#(B Cisco vulnerabilities
(SANS ISC, 2007.01.24)

$B!!(BCisco IOS $B$KJ#?t$N7g4Y!#(B

Cisco Security Advisory: Crafted TCP Packet Can Cause Denial of Service (Cisco)$B!#(B $B96N,(B IPv4 TCP $B%Q%1%C%H$K$h$C$F%a%b%j%j!<%/$,H/@8$9$k$?$a!"(Bremote $B$+$i$N(B DoS $B967b$,2DG=!#(BIPv6 TCP $B%Q%1%C%H$G$O$3$N7g4Y$OH/@8$7$J$$!#(B

$BBP>](B IOS: $B=$@5$5$l$F$$$J$$$b$NA4$F!#4XO"(B:
Cisco Security Advisory: Crafted IP Option Vulnerability (Cisco)$B!#(B $B96N,(B IP $B%*%W%7%g%s$N$D$$$?FCDj$N(B IP $B%Q%1%C%H(B (ICMP type 8 / 13 / 15 / 17, PIMv2, PGM, URD) $B$N=hM}$K7g4Y$,$"$j!"(BDoS $B967b$NB>!"G$0U$N%3!<%I$N]$K$J$C$F$$$k!#(B

$BBP>](B IOS / IOS XR: $B=$@5$5$l$F$$$J$$$b$NA4$F!#4XO"(B:
Cisco Security Advisory: IPv6 Routing Header Vulnerability (Cisco)$B!#(B $B96N,(B IPv6 Type 0 $B%k!<%F%#%s%0%X%C%@$K$h$C$F(B IOS $B$,%/%i%C%7%e$9$k$?$a!"(Bremote $B$+$i$N(B DoS $B967b$,2DG=!#(BIPv6 Type 2 $B%k!<%F%#%s%0%X%C%@$G$O$3$N7g4Y$OH/@8$7$J$$!#(B

$BBP>](B IOS: 12.x $B$N0lIt!#4XO"(B:

$B!!7g4Y$KBP1~$7$?(B IOS $B$K99?7$9$l$P$h$$!#(B

2007.01.27 $BDI5-(B:

$B!!4XO">pJs$rDI2C$7$?!#(B

$B"#(B bind 9.2.8 / 9.3.4 / 9.4.0rc2 $B%j%j!<%9(B
(ISC, 2007.01.25)

$B!!(Bbind 9.2.8 / 9.3.4 / 9.4.0rc2 $BEP>l!#(B2 $B7o$N%;%-%e%j%F%#7g4Y$,=$@5$5$l$F$$$^$9!#(B

Internet Systems Consortium Security Advisory. BIND 9: DNSSEC Validation$B!#(B $BBP>](B: bind 9.x$B!#(B CVE-2007-0494
Internet Systems Consortium Security Advisory. BIND 9: dereferencing freed fetch context$B!#(B $BBP>](B: bind 9.3.x / 9.4.x$B!#(B CVE-2007-0493

$B"#(B 2007.01.24

$B!U(B Windows XP Home $B%5%]!<%H1dD9OC:FG3(B
- $B%^%$%/%m%=%U%H!"#X#P%5%]!<%H$rA4@$3&$GBgI}1dD9$X(B ($BFIGd(B, 1/24)$B!#!V#2#5F|$K@5<0$KH/I=$9$k!W$=$&$G$9!#(B
- $B#X#P$N%5%]!<%H(B $BITK~ (NHK, 1/24)
$B!!:#F|$N%/%m!<%:%"%C%W8=Be!V(B $B!HFH@j%=%U%H!IH/Gd$NGHLf(B $B!A?7%&%#%s%I%&%:H/Gd!A(B$B!W$K$*$$$F!"(BMicrosoft $B$N(B Windows $BK\It(B $BK\ItD9(B $B%8%'%$!&%8%'%$%_%=%s;a(B$B$,%5%]!<%H1dD9$rL@8@$7$F$$$^$7$?$+$i!"
$B!!$-$g$&$N8@MU(B: $B!V@5D>
$B!U(B Remove old JRE! (SANS ISC)$B!#8E$$$N$O>C$7$^$7$g$&!#(B
$B!U(B Review: Six Rootkit Detectors Protect Your System (informationweek, 1/16) (info from $B$F$C$7!<$N4]=P$7(B, 1/21)$B!#(B F-Secure BlackLight, IceSword, RKDetector, RootkitBuster, RootkitRevealer, Rootkit Unhooker $B$N>R2p$HI>2A!#(B
$B!U(B $B!V(BCHECK PC!$B!W%-%c%s%Z!<%s3+;O$K$D$$$F(B ($B7P;:>J(B, 1/22)$B!#%"%W%j$N%A%'%C%/$bK:$l$:$K!#(B
$B!U(B $B%;%-%e%j%F%#$OC/$+$,$d$i$M$P(B (@IT, 1/23)$B!#(B$B%-%c%7%c!<%s(B$B$,$d$i$M$PC/$,$d$k!D!D$G$O$J$/(B JPCERT/CC $B$N>.5\;3$5$s$NOC!#(B
$B!U(B VSE8.5i $B$r%$%s%9%H!<%k8e!"(BLotus Notes $B$G!VA`:n$r ($B%^%+%U%#!<(B)$B!#!V$9$Y$F$N%5!<%P(B $B%G!<%?%Y!<%9$N%9%-%c%s!W$H!V%5!<%P$N%a!<%k%\%C%/%9$N%9%-%c%s!W$rL58z$K$9$k$3$H$G2sHr$G$-$k$h$&$G$9!#(B
$B!U(B $B$"$k$"$kBg;vE5$,!V0l@Z%j%s%/$*CG$j!W$H$7$F$$$??46-$r?d;!$9$k$H8+$($F$/$k$b$N(B ($B9bLZ9@8w!w<+Bp$NF|5-(B, 1/23)
$B!U(B $BCfBf$N6u73NO!"Cf9q$N]S(B10$BBgNLG[Hw$G5UE>$+(B ($BD+A/F|Js(B, 1/24)$B!"(B J-10$B@oF.5!(B($B]S7b(B10/F-10) (livedoor Wiki)
$B!U(B $B%^%k%A>&K!!'D03P>c32c32 ($BKhF|(B, 1/23)
$B!U(B $BKL3$F;KL8+;T(B $B%,%91L$l;v8N(B
- $BKL3$F;KL8+;T$N%,%9O3$l$G;W$$=P$7$?!$$"$kGzH/;v8N(B ($BF|7P(B Tech On, 1/23)
- $BKL3$F;%,%9$N4IIe?)!"O75`4IB?$$KL8+CO6h$GB?H/(B ($BFIGd(B, 1/24)
- $BKL3$F;%,%9!";v8NH/@8A0$N;v (asahi.com, 1/24)
$B!U(B $BD;%$%s%U%k%(%s%6J}LL(B
- $B9bIB86@-D;%$%s%U%k%(%s%6$K4X$9$k>pJs(B ($B5\:j8)(B)
- $B5\:j8)CN;v!'!VIwI>Ho32$,IT0B!W!!F|8~;T$N7\BgNL;`$G!!(B ($BKhF|(B, 1/24)
- $BD;%$%s%U%k!'G@?e>J!"5\:j8)$N8=CO$K5fL@%A!<%`GI8/$X(B ($BKhF|(B, 1/24)
- $B5\:j!&F|8~$NM\7\>l!">CFG:n6HB3$/(B ($BFIGd(B, 1/24)
- $B%R%H46@w!V?77?%$%s%U%k!WA[Dj!"=i$NBg5,LO71N} ($BFIGd(B, 1/23)$B!#(B2/5 $B$@$=$&$G$9!#(B
$B!U(B $B!V?M:`0i@.!&;q3J@)EYBN7O2=@lLg0Q0w2qJs9p=q!J0F!K!W$K4X$9$k0U8+$NJg=8$N7k2L(B (NISC, 1/23)
$B!U(B $B@8BNG'>Z%-%c%C%7%e%+!<%I$N4m81@-(B ($BF|7P(B IT Pro)
$B!!4XO"(B:
- $B%$%*%s%/%l%8%C%H%5!<%S%9$N;X@EL.G'>Z(B: $B$O$$$?$C$/(B 2005.8 ($BF|N)(B)
$B!!!V(B2005$BG/(B11$B7n(B16$BF|IU$NF|7P;:6H?7J9!W$@$+$i$J$"!#(B $B8=:_$O$I$&$J$s$G$9$+$M$(!#(B
$B!U(B $B1R@150F;$K%G%V%j$r$^$-;6$i$9GO
- $BCf9q$N?M9)1R@1GK2u ($BFIGd(B, 1/24)
- $BCf9q$N?M9)1R@1967b (slashdot.jp, 1/23)
$B!U(B $B>^L#4|8B@Z$l$N0;!"IY;3%F%l%S$,$D$+$_ ($BFIGd(B, 1/24)$B!#!X%U%8%F%l%S7ONs6I$N!VIY;3%F%l%SJ|Aw!W!Y$H=q$+$l$F$7$^$$$^$9$+!D!D!#(B
$B!U(B $B!N(BDJ$B!O(B MS$B!"%V%m%,!<$K(BWikipedia$B$N=$@5$r0MMj(B (ITmedia, 1/24)$B!#0MMj$@$1$G:Q$s$G$$$l$P$^$@$h$+$C$?$N$@$1$I!"(B

$BJF(BMicrosoft$B$,(B1$B7n(B23$BF|!"%*%s%i%$%sI42J;vE5(BWikipedia$B$GLLL\$r<:$C$?!#F1
$B!U(B $B%o%?%J%Y9)6H$N!VEE5$%_%K%^%C%H!W$KH/1l!&H/2P$N$*$=$l(B ($B2HEE(B Watch, 1/22)

$B!U(B 2$B7n(B2$BF|$O!V>pJs%;%-%e%j%F%#$NF|!W!"4XO"9T;v$,A49q$G(B300$B7o0J>e3+:E(B ($BF|7P(B IT Pro, 1/23)$B!#$K$#$K$#$H$$$&6A$-$+$i$O!V(BWinny $B$NF|!W$rO"A[$7$F$7$^$&$N$@$,!"$=$&$G$O$J$$$i$7$$!#(B

$B!U(B TROJ_SMALL.EDW ($B%H%l%s%I%^%$%/%m(B)$B!#%H%l%s%I%^%$%/%m(B $B%k!<%H%-%C%H%P%9%?!<$H$$$&$b$N$,$"$k$N$G$9$+!#(B

$B!U(B $BJF9q!'%$%i%/=>735qH]%o%?%@:[H=$X$N=PF,L?Na(B (JANJAN, 1/23)

$B!U(B $B%*%j%3%sAJ>Y$OB>?M;v$G$O$J$$(B ($BF|7P(B IT Pro, 1/22)

$B"#(B JVN#32985115: Movable Type $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H
(JVN, 2007.01.23)

$B!!(BMovable Type 3.3$B!A(B3.33 $B$K(B XSS $B7g4Y$,$"$k$H$$$&OC!#(B Movable Type Security Bug (NoFollow $B%W%i%0%$%sOC(B) $B$H$OJL$NOC$+(B? Movable Type 3.34 $B$G=$@5$5$l$F$$$k$=$&$@!#(B 3.34 $B$G2r@b$5$l$F$$$k!"(BMovable Type Security Bug $B$H$OJL$NOC$K$O0J2<$,$"$k!#(B

$BIT@5$J(BHTML$B%?%0$K$h$k%9%/%j%W%H $B$"$k
MTCommentPreviewIsStatic$B%F%s%W%l!<%H%?%0$N5!G=$rMxMQ$7$?%9%/%j%W%H MTCommentPreviewIsStatic$B$N5!G=$rIT@5$K;HMQ$9$k$3$H$G!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$r2DG=$K$9$kIT6q9g$,B8:_$7$F$$$^$7$?!#$3$NIT6q9g$r=$@5$7$^$7$?!#(B

2007.01.29 $BDI5-(B:

$B!!(BMovable Type <= 3.33 XSS Exploit

$B"#(B $BDI5-(B

$B$$$m$$$m(B (2007.01.16): $B!!(BMovable Type 3.34$BF|K\8lHG$NDs6!$r3+;O(B (sixapart.jp)$B!#(BMovable Type Security Bug $B$NOC$,=$@5$5$l$F$$$^$9!#(B
Apple QuickTime RTSP URL Handler Vulnerability: $B!!(Bpatch $B$,=P$^$7$?(B: Security Update 2007-001 $B$K$D$$$F(B (Apple)$B!#(B $BE,MQ$7$F$b(B QuickTime $B$N%P!<%8%g%sI=<($OJQ$o$i$J$$$_$?$$$G$9$M!#(B

$B"#(B P2P$B%=%U%H(BShare$B$N0E9f$r2r@O!$%M%C%H%o!<%/2D;k2=%7%9%F%`$r3+H/(B
($BF|7P(B IT Pro, 2007.01.23)

$B!!1-;t$5$s$,$^$?$d$C$?(B! Winny $B$K$R$-$D$E$$$F!":#EY$O(B Share $B$G$9!#(B

$B"#(B 2007.01.23

$B!U(B zone-h $B:F$S(B ($B$F$C$7!<$N4]=P$7(B, 1/23)$B!#$"$i$i!D!D!#(B
$B!U(B $B%D%\%+%S>I!'%+%(%k!"@$3&3FCO$G7c8:!!9qFb$G$b3HBg$N62$l(B ($BKhF|(B, 1/23)
$B!U(B $BD;%$%s%U%k%(%s%6J}LL(B
- $BD;%$%s%U%k!'5\:j!&F|8~$NM\7\>l$G$bBgNL;`!!46@w$N5?$$(B ($BKhF|(B, 1/23)
- $BD;%$%s%U%k!'Cf9q$N%&%$%k%9$HF1$80dEA;R!!EO$jD;$G46@w!)(B ($BKhF|(B, 1/23)
$B!U(B $B1R@150F;$K%G%V%j$r$^$-;6$i$9GO
- $B1R@1GK2u ($BKhF|(B, 1/23)
- $B1'Ch$K5pBg$J!VGKJR$N1@!W(B $B9q:]%9%F!<%7%g%s$K>WFM$b(B (47news, 1/23)
$B!U(B $B0e;UITB-!'8xN)IB1!$NH>?t!"?GNE=L>.!!KhF|?7J9D4::(B ($BKhF|(B, 1/23)
$B!U(B $B!V%T%N!W$H!V%i%s%G%#!WH/Gd!]F|;:$H%9%:%-(B ($B;M9q?7J9(B, 1/23)$B!#%S%s!&%i%G%#%s$H6uL\$7$?!D!D(B orz
$B!U(B $B%+%i%*%1E9$HCN$j$D$DN)$AF~$jD4::$;$:!!JuDM;T>CKIK\It(B (asahi.com, 1/23)$B!#$?$N$7$$%?%F3d$j9T@/!#(B $B$5$i$K$3$s$JOC$b(B: $BJuDM%+%i%*%1E92P:R!'7zJ*=jM-CKI=p6PL3(B ($BKhF|(B, 1/23)
$B!U(B $B29CH2=#C#O#2!"3$$N;@@-2=$b>7$/!!%5%s%4$,;`LG4m5!(B (asahi.com, 1/22)

$B?e29$d?e05$J$I$K$b$h$k$,!";@@-2=$,?J$`$H!"C:;@%+%k%7%&%`$G$G$-$?%W%i%s%/%H%s$N3L$d%5%s%4$N9|3J$,MO$1=P$962$l$,$"$k!#(B($BCfN,(B) $BF|K\$r4^$`9q:]6&F1%A!<%`$O#0#5G/$K$^$H$a$?Js9p$G!"#5#0G/$4$m$K#C#O#2G;EY$,#5#0#0#p#p#m$K$J$k$H$9$k$HFn6K3$$N0lIt$GC:;@%+%k%7%&%`$,MO$1=P$7!"#2#1@$5*Kv$K#7#8#0#p#p#m$K$J$k$H$9$k$HFn6K3$A4BN$HKLB@J?MN$N0lIt$K9-$,$k62$l$,$"$k!a?^!a$H7Y9p$7$?!#(B

$B"#(B 2007.01.22

$B!U(B $BHVAH$M$DB$!'2V2&$,%9%]%s%5!<9_HD!!BG$A@Z$j;ve7h$^$k(B ($BKhF|(B, 1/22)$B!#(B $B%9%]%s%5!<$N@Z$lL\$,1o$N@Z$lL\!#(B $B$7$+$7LBOGHVAH$N1F6A$O$^$@$^$@B3$/(B:

$BHVAH$M$DB$!'G ($BKhF|(B, 1/22)
$BG ($BA49qG
$B!U(B SIM$B%m%C%/2r=|!";T>l3h@-2=$X8!F$!!AmL3>J(B (ITmedia, 1/22)

$B!U(B $BGX7J$,9u$$!V(BBlack Google$B!W$OCO5e$r5_$&(B (gigazine, 1/22)$B!#9u$/EI$l(B!

$B!U(B $BHH:aHo32H/I=$O7Y;!H=CG!"1?MQ$+$i#1G/!!A}$($?0B0W$JF?L>(B ($BKhF|(B, 1/22)

$B!U(B $BD9Ln8)!!=;4p%M%C%HMxMQ$X(B ($BKhF|(B, 1/19)$B!#$$$^$5$i(B?

$B!U(B mixi$B!"%3%_%e%K%F%#4IM}?M$N="G$>r7o$H$7$F!V;22C4|4V$,(B3$B3dD6!W(B (Internet Watch, 1/22)

$B!U(B $B%G!<%?%Y!<%9!&%;%-%e%j%F%#$K$*$1$k!V4F::!W$N=EMW@-(B ($BF|7P(B IT Pro, 1/21)

$B!U(B $B?@8M$G?L:RBP:v%;%_%J!<3+:E!J>e!K!VFn3$%H%i%U5pBgCO?L8&5f$N:GA0@~!W(B (JANJAN, 1/21)

$B!U(B $B%O%$%F%/4k6H$H?M8"CDBN!"8!1\BP93$N%M%C%H9TF05,HO$r:vDj$X(B (ITmedia, 1/22)

$B!U(B $B%+%(%k!&%D%\%+%S!':k6L$G?7$?$K#2Nc3NG'!!KcI[Bg$N%A!<%`(B ($BKhF|(B, 1/20)$B!#$^$:$$$G$9!#(B

$B!U(B $BL$@.G/ (asahi.com, 1/21)$B!#(B $BM-32%5%$%H%"%/%;%9@)8B%5!<%S%9!J%U%#%k%?%j%s%0%5!<%S%9!K$N(B $BIa5ZB%?J$K4X$9$k7HBSEEOC;v6H ($BAmL3>J(B, 2006.11.20) $B$X$NBP1~$N0l4D$H$$$&$3$H$G$7$g$&$+!#(B

$B!U(B $BF02h6&M-G[?.%5!<%S%9$HK!E*LdBj(B(1) YouTube$B$K8+$kCx:n8"?/32LH@U$X$N ($BF|7P(B IT Pro, 1/19)

$B!U(B $B%"%$!&%*!=(BTV$B$KO3EE$N2DG=@-(B $B!A(B570$BBf$rL5=~8r49(B (PC Watch, 1/22)

$B!U(B Storm Worm starts to use Rootkit techniques (F-Secure blog, 1/21)$B!#$I$s$I$s?J2=Cf$N$h$&$G$9!#(B

$B!U(B A5/3 and GEA3 Algorithms (cryptome, 1/21)$B!"(B Lawful Interception in 3GPP Rel-7 Architecture (cryptome, 1/20)

$B!U(B $B%0!<%0%k$O:#$N$^$^$G$OF|K\?M$N?M@8$rJQ$($k$3$H$O$G$-$J$$(B (gigazine, 1/22)$B!#(B NHK $B%9%Z%7%c%k(B $B!V(B$B%0!<%0%k3WL?$N>W7b(B $B!A$"$J$?$N?M@8$r!H8!:w!I$,JQ$($k!A(B $B!W(B $B$KBP$9$k(B gigazine $B$NJ,@O!#$H$j$"$($:O?2h$7$?$1$I$^$@8+$F$J$$$s$@$h$J$!!#(B

$B!U(B $BJF9q@/I\!"L14VN95R5!$KBP%_%5%$%kKI8fAuCV$NEk:\$r8!F$(B (technobahn, 1/19)$B!#(B $B4XO"(B: Northrop Grumman Begins Operational Test and Evaluation of its Guardian Commercial Airline Anti-Missile System (Northrop Grumman, 1/16)

$B!U(B $B#17n#1#6F|4XEE8r>DJs9p(B: $B4XEE$N0BA47Z;k$NBN ($BH~IM$N2q(B, 1/19)

$B!U(B $B%+!<%M%.!<%a%m%sBg3XF|K\9;(BCISO$B%;%_%J!<(B$B!#(B 2007.01.29$B!"El5~ET@iBeED6h!"L5NA!#$"$i!"(BHP $B$,6(;?$7$F$k!D!D!#(B

$B!U(B $B%Q%l%9%A%J!'Js$8$i$l$J$$%,%6$N5g>u(B (JANJAN, 1/19)

$B"#(B $B$$$m$$$m(B (2007.01.22)
(various)

[SA23841] SecureCRT / SecureFX OpenSSL RSA Signature Forgery$B!#(B SecureCRT 5.2.2 / SecureFX 4.0.2 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B

Release of NSD 3.0.4$B!#(B

Reasons to upgrade are a security fix in the ACL processing, where ACL entries of NOKEY that got TSIG signed notifies caused outage. Also replies to notifies could contain wrong DNS header counts in the packet. These two problems are fixed in NSD 3.0.4.

phpMyAdmin $BJ}LL(B: CVE-2006-6942 CVE-2006-6943 CVE-2006-6944$B!#(B XSS$B!"%Q%9L>O31H!"(BAllow/Deny $B%"%/%;%9%k!<%k$N2sHr!#(B2.9.1.1 $B$GD>$C$F$k$_$?$$!#(B

HP Jetdirect $BJ}LL(B: CVE-2007-0358$B!#(B $B%U%!!<%`%&%'%"(B x.20.nn $B!A(B x.24.nn $B$N(B ftp $B%5!<%P$K(B DoS $B967b$r
OpenBSD $BJ}LL(B: CVE-2007-0343$B!#(B ICMP6 ECHO REQUEST $B$K$h$C$F(B DoS $B967b$r3.9, 4.0) $B$GD>$k!#(B

FileZilla $BJ}LL(B: CVE-2007-0317$B!#(BLogMessage() $B$K(B format $B%P%0$,$"$j!"(BDoS $B$dG$0U$N%3!<%I$N$C$F$$$kLOMM!#(B

FileZilla $B$K$O(B CVE-2007-0315 $B$b$"$k!#(BOptions.cpp $B$H(B QueueCtrl.cpp $B$K7g4Y$,$"$j!"(BDoS $B$dG$0U$N%3!<%I$N$C$F$$$kLOMM!#(B

WFTPD $BJ}LL(B: CVE-2007-0311$B!#(B WFTPD / WFTPD Pro 3.25 $B0JA0$K7g4Y$,$"$j!"(B $BD9Bg$J(B SITE ADMIN $B$K$h$C$F(B DoS $B967b$,$G$-$k!#(B exploit

$B"#(B $BDI5-(B

[SA23767] Squid Denial of Service Vulnerabilities

$B!!(BBug 1857: Core dump on visiting GNU FTP server $B$N7o!"$h$/$h$/8+$?$i;`$s$G$$$?$N$G5-=R$rJQ99$7$^$7$?!#(Borz

$B"#(B 2007.01.21

$B!U(B $BLw9q?@ ($BKhF|(B, 1/21)

$B!U(B $B>C2P4o(B $B;H$$J}$o$+$i$J$+$C$?(B (NHK, 1/21)

$BBaJa$5$l$?%"%k%P%$%H=>6H0w$O!V2P$r>C$=$&$H$7$?$,!">C2P4o$N;H$$J}$,$o$+$i$J$+$C$?!W$H6!=R$7$F$$$k(B

$B!!;H$$J}(B:

$B>C2P4o$N;H$$J}(B (allabout)
$B>C2P4o$N;H$$J}(B ($B>CKIKI:RGnJ*4[(B)

$B!U(B European Storm Video E-Mail - version 3 (SANS ISC, 1/21)$B!#0!l$7$F$$$k$h$&$G!#(B $B
$B!!!D!D(B Sophos $B$,(B Trojan.Downloader-657 $B$KBP1~$7$?$H;W$C$?$i!"4{$K(B Trojan.Downloader-658 $B$,Mh$F$^$9$M!D!D!#(B

$B!U(B Another trojan run by the Storm Worm gang (F-Secure blog, 1/19)$B!#
$B!U(B Microsoft root certificate program members (January 2007) (Microsoft)

The table that is included in this article lists the third-party commercial certification authorities (CAs) that are trusted by Microsoft. As a Microsoft Windows user, you can use the listed CAs for secure e-commerce.

$B!!(B3rd $B%Q!<%F%#>&MQ(B CA $B$,BP>]$J$N$G!"$?$H$($P@/I\7O$N%b%N$O%j%9%H$5$l$F$^$;$s!#(B

$B!U(B $B@N$NHVAH%M%C%HG[?.!">5Bz$J$/$F$b#O#K!!Cx:n8"K!2~@5$X(B (asahi.com, 1/21)

$B!U(B Getting The Most From IEAK7 (IEBlog, 1/18)

$B!U(B $B8mG'BaJa!'I~Lr$NCK@-$OL5 ($BKhF|(B, 1/19)

$B8)7Y$K$h$k$H!";w4i3(A\::$dHo32Z8@$r
$B!!$D$^$j!"L5
$B!!7Y;!4XO"(B:

$B$*Ic$5$s$O$d$C$F$J$$!'QM:a$N62I]!"6lDK!!1G2h$N%b%G%k!"El5~$NIWIX$,=PHG(B ($BKhF|(B, 1/20)
$B$*Ic$5$s$O$d$C$F$J$$(B ($BB@ED=PHG(B)
$B7HBSMQ%"!<%_!<%J%$%U$N=j;}$G!"7ZHH:aK!0cH?$N7y5?!J>e!K(B (JANJAN, 1/19)$B!"(B $B7HBSMQ%"!<%_!<%J%$%U$N=j;}$G!"7ZHH:aK!0cH?$N7y5?!J2 (JANJAN, 1/20)
$BEj9F$5$;$i$l$F$7$^$$$^$7$?!#7Y;!$+$i!XHH:a$NBP>]J*$@$+$i=pL>$7$m!Y$H$$$o$l$l$PCG$l$J$$$N$,DL>o$G$9$,!"J|4~=q$K=pL>$7$J$1$l$PA\::=*N;8e!"2!<}J*$N4TIU@A5a$,$G$-$^$9(B
$B7Y;!$N8@$&$3$H$rAGD>$KJ9$/$H$m$/$J$3$H$K$J$i$J$$$N$,8=
$B!U(B $B$$$m$$$m(B

$B$*$?$Y!'4|8B@Z$l%A%g%3;HMQ!!#U#S#JHNGd(B ($BKhF|(B, 1/20)$B!"(B $B>&IJ2s<}$K$h$k$*OM$S$H$*CN$i$;(B (USJ, 1/20)$B!#(B $B$*$?$Y$N%[!<%`%Z!<%8(B $B$K$O2?$b$J$$$_$?$$!#(B
$B>^L#4|8B#4#2F|2a$.$?2[;R!"MDCU1`$KG ($BFIGd(B, 1/20)$B!#(B42 $BF|$G!V$&$C$+$j%_%9!W(B?
$B%"%/%(%j%"%9$J$I!"0[J*:.F~$G2s<}!DF|K\%3%+!&%3!<%i(B ($BFIGd(B, 1/20)
$B4|8B@Z$l?)1v?e!'2#IM$N?GNE=j!">.#2=w;y$KE@E)(B ($BKhF|(B, 1/20)

$B!U(B $BITFs2HJ}LL(B

$BITFs2H!'#3%+=jN)$AF~$j8!::!!#J#A#SK!$KDq?($+!!G@?e>J(B ($BKhF|(B, 1/18)
$BITFs2H!';%KZ9)>l!":Y6]?t3NG'$;$:=P2Y(B ($BKhF|(B, 1/19)
$BF19)>l$G:Y6]8!::$rC4Ev$7$F$$$?$N$O#1?M$G!":rG/#47n$K8rBe$7$?$P$+$j$NL$7P83
$BITFs2H!'>CHq4|8BI=<($J$$$^$^%W%j%s=P2Y!!@t:4Ln9)>l(B ($BKhF|(B, 1/19)
$B%W%j%s$N4|8BI=<(30$7$K$D$$$F$OK\5$7$F$$$?$H$$$$!"I\$O?)IJ1R@8K!$NI=<(5AL30cH?$N5?$$$,$"$k$H$7$F!"@t:4Ln9)>l$KE,@5I=<($9$k$h$&;X<($7$?!#(B ($BCfN,(B)
$B!!@t:4Ln9)>l$O!"J]7r=j$N$3$l$^$G$ND4::$K!V%W%j%s$O%+%C%WMF4o$KF~$l!"%i%C%W$r$+$1$?>uBV$G:k6L9)>l$K=P2Y$7!";E>e$2$O:k6L$G$d$C$F$$$k!W$H@bL@$7$F$$$?$,!"DI5Z$7$?$H$3$m!"HNGd$G$-$k40@.IJ$G=P2Y$7$F$$$?$3$H$rG'$a$?$H$$$&!#(B
$B!!F1K!$G$O!">&IJ$,40@.$7$?CJ3,$G>CHq4|8B$rI=<($9$k$3$H$,5AL3$E$1$i$l$F$*$j!"I\$NC4Ev
$BITFs2H!'#0#4G/HNGd$N%S%9%1%C%H$K6bB0JR!!0QBw@h@=B$(B ($BKhF|(B, 1/20)
$BITFs2H!'4|8B@Z$l86NA;HMQ!!?91J!"2[;RItLg;Y1g$rK\3JE*$K8!F$!!;3:j@=%Q%s$b0UM_(B ($BKhF|(B, 1/20)

$B!!(B$BITFs2H$N%[!<%`%Z!<%8(B$B!"(B $B$3$l$@$1O"F|=P$F$-$F$$$k$N$K!"(B 1/17 $B$,:G8e$N99?7$J$s$@$J$"!#(B

$B"#(B 2007.01.20

$B!U(B $BCN$C$F$*$-$?$$!*%7%9%F%`>c32;~$K;H$&1Q8l!!(BPart3$B!!:nJ8JT(B ($BF|7P(B IT Pro, 1/19)

$B!U(B $B%*%j%3%s#v#s%3%a%s%F!<%?!M@TLB;:[H=$rA0$K(B ($B%*!<%^%$%K%e!<%9(B, 1/19)

$B!U(B $BKL3$F;KL8+;T(B $B%,%91L$l;v8N(B

$BKL8+;T$K$*$1$k%,%9O3$l;v8N$K$D$$$F$N$*OM$S$H$4Js9p(B ($BKL3$F;%,%9(B, 1/20)
$B%K%e!<%9FC=8(B: $B%,%9O3$l;v8N(B (asahi.com)
$BKL3$F;%,%9O3$l!'4IGKCG$O!VA4<~55Nv!W!!KL%,%92q8+(B ($BKhF|(B, 1/20)
$B!!KL3$F;%,%9$O#2#0F|Lk!"5-l$NKL8+;T=U8wD.$H!"9,D.$GH=L@$7$?%,%94I$NGKCG$OG[4I$N<~0O$,40A4$K@ZCG$5$l$k!VA4<~55Nv!W$@$C$?$3$H$rL@$i$+$K$7$?!#$$$:$l$b$M$:$_CrE4!J$A$e$&$F$D!K4I!JD>7B#1#5%;%s%A!K$@$,!"DL>o$N7PG/Nt2=$G$bDA$7$$;v>]$H$5$l$k!#F1o$J;vBV!W$H=R$Y!"EZ>m$N6/EY$J$I8=CO$N>u67$r>\$7$/D4::$9$k9M$($rL@$i$+$K$7$?!#(B

$BKL3$F;!&KL8+$N%,%9O3$l!'JL$NO3=P!"<~CN$;$:!!KL%,%9!VA[A|D6$($?GKCG!W(B ($BKhF|(B, 1/20)
$B%,%94IGKCG#4$+=j!"$&$A#2$+=j$O40A4GKCG!DKL8+(B ($BFIGd(B, 1/20)
$BKL8+%,%9O3$l;v8N!!#C#OG;EY!"CW;`NL$N#8!G\!!=;5o$K7YJs4o$J$7!!#3%+=jL\O3=P$+(B ($BKL3$F;?7J9(B, 1/21)
$B;`K4$7$?;0?M$N=;5o$K$O$$$:$l$b%,%9O3$l7YJs4o$,@_CV$5$l$F$$$J$+$C$?$3$H$,KL3$F;%,%9$ND4$Y$GJ,$+$j!"7YJs4o$NM-L5$,@8;`$NJ,$+$lL\$K$J$C$?2DG=@-$,Ib>e$7$?!#(B($BCfN,(B) $B7YJs4o$OKL%,%9$,@_CV$r8F$S$+$1$F$$$k$,!"@_CV$9$k$+$I$&$+$O5o=;

$B!U(B $B ($BFIGd(B, 1/19)$B!#H~$7$$9q(B = $B6&KE:a$N$"$k9q!"$H$$$&$3$H$_$?$$$G$9$J!#(B $BK!0F$r$b$&$$$A$I9M$(D>$9!"$H$$$&;W9M$O$I$3$K$b$J$$$_$?$$!#(B

$B!U(B $B2L$7$J$-GCHq$N2L$K(B$B!"%,%;$,$"$k$"$k!#(B

$B;kD0 ($B4X@>%F%l%SJ|Aw(B, 1/20)$B!#$=$3$i$8$e$&%,%;$@$i$1$G$9$+!D!D!#(B
$B!V$"$k$"$kBg;vE5!W$NG%F%l%S(B (asahi.com, 1/20)
$B4X@>%F%l%S (asahi.com, 1/20)
$B$"$k$"$kBg;vE5!'!VG%F%l%S(B ($BKhF|(B, 1/20)
$B!!F1HVAH$O4X@>%F%l%S$N $BF|K\%F%l%o!<%/(B$B$G$9$+!D!D(B
$BHVAH$M$DB$!'4X@>%F%l%S ($BKhF|(B, 1/20)
$BHVAH$M$DB$!'!V$"$k$"$k!W=P1i65 ($BKhF|(B, 1/20)
$BHVAH$M$DB$!'!V$"$k$"$k!W$K>CHq ($BKhF|(B, 1/20)$B!#(B $B>CHq $BG ($BFIGd(B, 1/20)

$B"#(B 2007.01.19

$B!U(B $B%F%#%U%!!<%k$NEE5$%1%H%k!V%"%W%l%7%"!W$KH/1l!&H/2P$N62$l(B ($B2HEE(B Watch, 1/19)

$B!U(B $B!ZB.Js![7P:Q;:6H>J$,(BJ-SOX$B8~$1!V(BIT$BE}@)!W$N;X?K$r8x3+!"6qBNNc$rK-IY$K5-:\(B ($BF|7P(B IT Pro, 1/19)

$B!U(B 2 $B$A$c$s$M$kJ}LL(B

$B$R$m$f$-;a!V$^$@JD:?$9$k5$$O$J$$!W!"%K%o%s%4$,%$%s%?%S%e!<5-;v8x3+(B (Internet Watch, 1/17)
$B$R$m$f$-;a%$%s%?%S%e! (ITmedia, 1/17)
$B8!>Z!$A$c$s$M$kJD:?$N2DG=@-!!(B $B8fF22,7<><;a$KJ9$$$?(B ($B%*!<%^%$%K%e!<%9(B, 1/18)

$B!U(B $B56%=%U%H%&%'%"$r5!G=LL$G$J$/!" (Semplice, 1/16)

$B!U(B $BITFs2H;%KZ9)>l!":Y6]?t3NG'$;$:=P2Y!D!VL58B!W5-O?$b(B ($BFIGd(B, 1/19)$B!#L58B$C$F!D!D!#(B

$B!U(B $B@$3&=*Kv;~7W$N?K$,(B2$BJ,?J$_!"??LkCf$^$G$"$H(B5$BJ,$K(B (slashdot.jp, 1/18)$B!#A4LLG.3K@oAh$OH/@8$7$J$$$@$m$&$1$I!"(B $B5$8uBg0[JQ(B (NHK) $B$,IA$-=P$7$?CO5e29CH2=$N!V:G$b3Z4QE*$JM=B,!W$OA4$/%7%c%l$K$J$C$F$J$$$7!D!D!#(B

$B!!4XO"(B: $B0l?M0l?M$,9TF0$r!A1G2h!VITET9g$J?? (JANJAN, 1/17)

$B!U(B $BK!L3>J!'8rDL;v8N$NH3B'6/2=$X!!(B ($BKhF|(B, 1/19)

$B!U(B $B%$%s%U%k%(%s%6$M$?(B

$B?77?%$%s%U%k%(%s%6!'BP1~$^$H$a$?%,%$%I%i%$%s0F!!8|O+>J(B ($BKhF|(B, 1/19)
$B%9%Z%$%sIwo$GA}?#!"FG@-6/$/!!(B ($BKhF|(B, 1/19)

$B!U(B mixi $B$M$?(B

mixi$B%3%_%e%K%F%#!h$C (ITmedia, 1/10)$B!#@5BNITL@$JAj mixi$B!"!H%3%_%e%K%F%#!<>h$C (ITmedia, 1/18)

$B!U(B $B%&%$%k%9%P%9%?!<(B2007 - 15.x: $B%9%Q%$%&%'%"8!:w$N(B[$BNc30@_Dj(B]$B%/%j%C%/$G!V@_Dj$NFI$_9~$_$K<:GT$7$^$7$?!W%a%C%;!<%8$,I=<($5$l$k(B ($B%H%l%s%I%^%$%/%m(B)

$B!U(B Windows/Linux/Mac/BSD Rootkit Basics (blacksecurity.org, info from $B$F$C$7!<$N4]=P$7(B)

$B!U(B $BF|K\8xG'2q7W;N6(2q(B PCAOB2$B9fK]Lu(B ($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 1/18)

$B!U(B Commercial-grade redundant client-server backend systems - for SPAM (F-Secure, 1/18)$B!#6b$NNO$O0NBg$@!#(B

$B!U(B $B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 7.3/7.0/6.5 Internet Explorer 7$B$N;HMQ;~$K$*$1$kCm0U;v9`(B ($B%H%l%s%I%^%$%/%m(B)

$B!U(B $B3$$N8~$3$&$N!H%;%-%e%j%F%#!I(B $BBh(B4$B2s!'!V?M$OC/$+$i$N%a!<%k$K$R$C$+$+$j$d$9$$$+!WJFBg3X$N (Internet Watch, 1/18)

$B!U(B $BBg2"%$%s%?!<%J%7%g%J%k$N%O%m%2%s%R!<%?!J$,;HMQCf;_$r8F$S$+$1(B ($B2HEE(B Watch, 1/19)

$B!U(B Mal/EncPk-B $B$N8!=PJs9p$,$$$C$Q$$$-$F$k$J$!!D!D!#(B $B$5$-$[$I(B Virustotal $B$7$F$_$?$i!"(B$B$3$s$J46$8(B$B!#(B $B%H%l%s%I%^%$%/%m$O(B 4.193.00 $B$G$bBP1~$7$F$$$J$$$G$9!#!D!D(B 4.197.00 $B$G$OBP1~$7$F$^$7$?!#(B

$B!!4XO"(B: Storm-Worm Small.DAM Spread Quickly (F-Secure blog, 1/19)

$B!U(B $B1R@150F;$K%G%V%j$r$^$-;6$i$9GO

$BCf9q!"1R@1GK2u (asahi.com, 1/19)
$BF|K\@/I\$b7|G0I=L@!!Cf9q$N1R@1GK2u (asahi.com, 1/19)
$BCf9q$,CFF;%_%5%$%k$G$N1R@1GK2u ($BFIGd(B, 1/19)

$B!!4XO"(B: ASM-135 (M.A.S.D.F.)$B!"(B Anti-satellite weapon (wikipedia)$B!"(B $B1R@1967bJ<4o(B ($B%&%#%-%Z%G%#%"(B)$B!"(B Starfire Optical Range (wikipedia)$B!"(BStarfire Optical Range Eyeball (eyeball-series.org)

$B!U(B $B%-%d%N%s@=>.7?J# ($B%-%d%N%s(B, 1/18)

$B%-%d%N%s$O!"(B1990$BG/$+$i(B1993$BG/$K$+$1$F@=B$!&HNGd$7$?%+!<%H%j%C%8<0$N>.7?J# $BBP>]5!e$G%H%i%C%-%s%08=>]"($,5/$3$j!"4pHD>e$N0lItJ,$GH/1l!&H/2P$K;j$k2DG=@-$N$"$k$3$H$,H=L@$7$^$7$?!#(B

$B"#(B $BDI5-(B

Microsoft Excel $B$N@H

$B!!(BExcel 2000 $BMQ$N?7(B patch $B=P$^$7$?(B: MS07-002 $B$N:F%j%j!<%9(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2007.01.19)$B!#(B $B

$B"#(B 2007.01.18

$B!U(B $B%@%a!<%8%/%j!<%s%J%C%W%(%s%8%s(B 5.0 $B8x3+$N$*CN$i$;(B ($B%H%l%s%I%^%$%/%m(B)$B!#(B1/24 $B8x3+M=Dj!#(BVista $BBP1~!"(B64 bit $BBP1~!"(BGeneric Clean $B5!G=DI2C!#(B

$B!U(B $BJF(BMicrosoft$B!$!V(BWindows Vista$B!W$N%;%-%e%j%F%#5!G=$G(BNSA$B$N4XM?$rG'$a$k(B ($BF|7P(B IT Pro, 1/18)$B!#$^$!!"(BSELinux $B$@$C$F!V(BNSA$B$N4XM?!W%P%j%P%j$@$7$J$"!#(B

$B!U(B $B%*!<%^%$%K%e!<%9J}LL(B

$BD;1[JT=8D9<-G$A{F0(B $B>pJs8;$O8bBeI=<+?H$@$C$?(B (J-CAST, 1/18)
$B!T(BESPIO!$B!U(B $B%*!<%^%$%K%e!<%9F|K\HG$N=*_a(B (1/18)
$BD;1[=SB@O:$HEpD0K!!"6&KE:a!"!X%*!<%^%$%K%e!<%9!Y!J(B1$B!K(B $B!X#J#A#N#J#A#N!Y$,D;1[=SB@O:!&!X%*!<%^%$%K%e!<%9!YJT=8D9<-G$$rA0BG$A(B (THE INCIDENTS, 1/14)
$BD;1[=SB@O:$HEpD0K!!"6&KE:a!"!X%*!<%^%$%K%e!<%9!Y!J(B2$B!K(B $B8bO"o.;a$,8eG$JT=8D9A*$S$GElK[@>Av(B (THE INCIDENTS, 1/17)
$BD;1[=SB@O:$HEpD0K!!"6&KE:a!"!X%*!<%^%$%K%e!<%9!Y!J(B3$B!K(B $BJ?LnF|=PLZ!&!X%*!<%^%$%K%e!<%9!YJT=8 (THE INCIDENTS, 1/18)

$B!U(B $B!V(BWinny$B$d$a$^$7$?!W$,%[%s%H$+$I$&$+$rD4$Y$k%=%U%HEP>l(B (slashdot.jp, 1/18)$B!#(B Winny$BFCJLD4::0w(B (NetAgent) $B$NOC!#(B

$B!U(B $B%F%mBP:v!VNa>u$J$7EpD0!W!"JF@/8"$,;veCf;_(B (asahi.com, 1/18)

$B!U(B $B%1!<%?%$!"(BPC$B(!(!>pJs2= (ITmedia, 1/17)

$B!U(B The Debug Diagnostic 1.1 tool is now available (Microsoft)

$B!U(B $BJF(BMicrosoft$B!$!V(BWindows Vista$B!W$X$N%=%U%HF1$3$s@)8B$rLO:w(B ($BF|7P(B IT Pro, 1/18)

$BJF(BCBS News$B$NJsF;$K$h$l$P!$JF(BMicrosoft$B$O(BWindows$B$NIJ
$B!!(B3rd party $B%"%W%j$K$h$k0BDj@-Dc2<$O
$B!U(B NTT Com$B!"BfOQ2-CO?L$K$h$kDL?.>c32$,$9$Y$F2sI|$7$?$HH/I=(B (Internet Watch, 1/17)

$B!U(B $B%0!<%0%k$H1Q73!"%F%m%j%9%H$K$h$k(BGoogle Earth$B$NMxMQ$K$D$$$F6(5D(B (CNET, 1/18)

$B!U(B $B%V%C%7%eBgE}NN!"!V%W%j%F%-%9%F%#%s%0!W$rHH:a$H$9$kO"K.K!$K=pL>(B (CNET, 1/17)

$B!U(B Microsoft Forefront Client Security (Microsoft)$B!#(B public beta $B$,8x3+$5$l$F$$$k$h$&$G$9!#(B

$B!U(B $BJF9q@/I\!"%F%mBP:v$Gl$K%l!<%6! (technobahn, 1/17)$B!#(B Skyguard $B$H$$$&(B$B@o=Q9b%(%M%k%.!<%l!<%6!<(B$BJ<4o$@$=$&$G$9!#(B $B4{$K%F%9%H%Y%C%I$N3+H/$K$O@.8y$7$F$*$j!"(B $B$3$l$+$i(B detailed operational concept $B$N3+H/$*$h$S1?MQ%F%9%H$r9T$&$h$&$G$9!#H>7B(B 10km $B$r%+%P!<$9$k$h$&$G$9!#(B

Missile-Proofing Runways: Homeland Security eyes high-power lasers for protecting commercial flights (Popular Science, 2006.12)$B!#%F%9%H%Y%C%I$N1GA|$"$j!#(B $B%m%1%C%H!"%_%5%$%k!"Gw7bK$$r7^7b$7$F$$$^$9!#(B
Northrop Grumman Develops Skyguard Laser Defense System For U.S., Allies to Defend Against Rocket, Missile, Mortar Attacks (Northrop Grumman, 2006.07.12)
Skyguard Media Gallary (Northrop Grumman)

$B!!$3$N$B2=3X%l!<%6!<(B) $B$K$O%l!<%6!The Safety and Performance Record of High-Energy Chemical Laser Systems (Northrop Grumman, 2006.09.29) $B$r?.$8$k8B$j$G$O!"Bg$-$JLdBj$O$J$$$3$H$K$J$C$F$$$k$h$&$G$9!#(B

$B!U(B $B%&%$%k%9%P%9%?!<(B2007 - 15.x: $B%M%/%=%s%8%c%Q%s ($B%H%l%s%I%^%$%/%m(B) $B$N7o$K$D$$$F!"2#;3$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B):

$B!!I=Bj$N7o$K4X$7$F!"C1$J$kLQA[$G$9$,!V%a%$%W%k%9%H!<%j! $B!!;d$O>\$7$/CN$i$J$$$N$G$9$,$3$N(B nProtect $B$,%/%;$b$N$i$7$/!"F1$8$/$3$N%=%U%H$r;H$C$F$$$k(B Phantasy Star Universe $B$G$O4D6-$K$h$C$F(B Norton IS 2007 $B$N%"%/%F%#%V2=$,L58z$K$5$l$?$j!"B>$N%&%$%k%9BP:v%=%U%H$G$b(B OS $B$r4,$-9~$s$G%/%i%C%7%e$9$kEy$H$$$C$?IT6q9g$,H/@8$9$k$3$H$b$"$k$=$&$J$N$G0l35$K%&%$%k%9%P%9%?!<$,0-$$$H$O8@$($J$$$+$b$7$l$^$;$s!#(B

$B!!$0$0$C$F$_$k$H!"(B nProtect Gameguard $B$,(B Norton (2006 $B0JA0(B?) $B$H$V$D$+$k;vNc$OJ#?tJs9p$5$l$F$$$k$h$&$G!#(B

PSU$B!!%N!<%H%s$r0l;~%"%s%$%s%9%H!<%k$7$FL5NA%U%!%$%"%&%)!<%k$r%$%s%9%H!<%k$9$k(B (Automat, 2006.12.23)
CCPROXY$B!%(BEXE$B$,%*%s%i%$%s%2!<%`Cf$K%U%k(BCPU$B$K$J$j$^$9(B ($B$?$C$T(B, 1/4)
$B!Z(BPSU$B![#n(BPro$B;`$M#w#w#w#w#w#w#w#w#w#w#w(B (2ch.net)

$B!!$"$H!"(BGameGuard.des $B$N@)8B2r=|@_Dj$rK:$l$F$$$F$&$^$/;H$($J$$$H$$$&;vNc$b$"$k$_$?$$(B: 15$BF|%"%C%W%G!<%H$G%/%i%$%"%s%H$,5/F0$7$J$$!D(B (fezero.jp)$B!#(B

$B!!$G$b!"%H%l%s%I%^%$%/%m$N$3$N(B KB $B$O!X!V%a%$%W%k%9%H!<%j!
$B!U(B $B9S$l$?@$Aj$H!V$7$c$\$s6L!W$N881F(B ($BJ]:dE8?M$N$I$3$I$3F|5-(B, 1/16)

$B!U(B $B%K%C%]%s$N;`7:$N?? ($BJ]:dE8?M$N$I$3$I$3F|5-(B, 1/17)

$B0BG\AmM}$,!V4pK\E*$J2ACM4Q$r6&M-$7$F$$$k!W$H=R$Y$?%U%i%s%9$HF|K\$G$O!";`7:@)EY$K$D$$$F$O(B180$BEYAj$$$l$J$$2ACM4Q$r;}$C$F$$$k!#%F%mBP:v$G7:;v;v7o$NHH?M0z$-EO$76(Dj$r7k$\$&$K$b!"!VF|K\$N;`7:@)EY!W$3$H$,6(Dj$N>c32$H$J$C$F$$$k$3$H$r0BG\AmM}$OCN$C$F$$$k$N$@$m$&$+!#(B

$B!U(B $B650i:F@82q5D!"!VBNH3!W$NDj5A8+D>$7!D@/I\$KMWK>$X(B ($BFIGd(B, 1/17)$B!#%+%D%*7/$N3X9;$G$NMM;R$,:F$SJQ2=$7$?$j$9$k$s$@$m$&$+!#(B

$B!U(B $BEpD0IT2DG=$J0E9f$r=i3+H/!"#5G/8eL\I8$K>&IJ2=(B ($BFIGd(B, 1/17)$B!#NL;R0E9f$M$?!#(B $B0BA4@-$rDjNLE*$KJ]>Z$9$kNL;R0E9f80G[I[%7%9%F%`$r3+H/(B ($B2J3X5;=Q?66=5!9=(B, 1/17)

$B!U(B $BLnD;$N;`BN$+$iD;%$%s%U%k%(%s%6%&%$%k%9!!9a9A(B (asahi.com, 1/17)

$B"#(B $B$$$m$$$m(B (2007.01.18)
(various)

CVE-2007-0201$B!#(BTIS fwtk 2.1 $B$N(B ftp-gw $B$K(B buffer overflow $B$9$k7g4Y$,$"$k$H$$$&OC!#(B

JVN#95249468: $B%U%l%C%7%e%j!<%@!<$K$*$1$k(B RSS $B%U%#!<%I(B $B%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H$B!#(B CVE-2007-0362

Microsoft Help Workshop .CNT contents files buffer overflow vulnerability$B!#(BVisual Studio 6.0 / 2003 $BIUB0$N(B Microsoft Help Workshop $B$K$O(B .cnt $B%U%!%$%k$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$k$H$$$&;XE&!#(B PoC $B$D$-!#(B CVE-2007-0352

$B$J$s$+@N;w$?$h$&$JOC$,$J$+$C$?$C$1(B? $B$H;W$C$F$0$0$C$?$i(B Microsoft HTML Help Workshop ".hhp" Parsing Buffer Overflow (Secunia) $B$rH/8+!#(B

Google$B%5!<%S%9$K(Bcookie$BEpFq$N@H (ITmedia, 2007.01.17)$B!#:#$OD>$C$F$k$_$?$$!#(B

$B"#(B [SA23767] Squid Denial of Service Vulnerabilities
(Secunia, 2007.01.16)

$B!!(BSquid 2.6.STABLE7 $B$G=$@5$5$l$?$b$N(B$B$N$&$A!"(B Bug 1857: Core dump on visiting GNU FTP server $B$H(B Bug 1848: external_acl crashes with an infinite loop under high load $B$,%;%-%e%j%F%#$,$i$_$i$7$$!#(B

Bug 1857: Core dump on visiting GNU FTP server $B$r8+$k$H!"(B FTP listings uses "BASE HREF" much more than it needs to $B$N=$@5$K$h$C$FH/@8$7$?$H$5$l$F$$$k$N$G!"BP>]$H$J$k$N$O(B squid 2.5.STABLE11 $B0J9_$+!#(B squid 3.0 $B$K$b$3$NLdBj$,$"$C$?LOMM!#(B

~~$B$G$b $B$h$/$h$/D4$Y$?$i;`$s$G$^$7$?(B orz~~

~~CVE-2007-0247~~

Bug 1848: external_acl crashes with an infinite loop under high load $B$NJ}$O!"(Bsquid-2.5.14_3 $B$G$OLdBj$,H/@8$7$F$$$J$$$HJs9p$5$l$F$$$k$N$G!"(B squid 2.6 $B$NLdBj$+!#(B squid 3.0 $B$K$O$3$NLdBj$O$J$+$C$?LOMM!#(B

~~CVE-2007-0248~~

2007.01.22 $BDI5-(B:

$B!!(BBug 1857: Core dump on visiting GNU FTP server $B$N7o!"$h$/$h$/8+$?$i;`$s$G$$$?$N$G5-=R$rJQ99$7$^$7$?!#(Borz

$B"#(B $BDI5-(B

APSB06-18: Update available for HTTP Header Injection Vulnerabilities in Adobe Flash Player

$B!!(BFlash Player 9 for Linux $B@5<0HG$,=P$?$h$&$G$9(B: Adobe Flash Player 9 for Linux now available on adobe.com (Emmy Huang, 2007.01.16)

$B"#(B BEA: Security Advisories and Notifications
(BEA, 2007.01.16)

$B!!(B2007.01.16 $BIU$G7W(B 28 $B7o(B ($B?75,$O(B 24 $B7o(B) $B=P$F$$$^$9!#(BBEA $B@=IJ$NMxMQpJs$"$j$,$H$&$4$6$$$^$9!#(B $B4XO"(B:

[SA23786] BEA AquaLogic Weakness and Multiple Vulnerabilities
[SA23750] BEA WebLogic Multiple Vulnerabilities and Security Issues

$B"#(B 2007.01.17

$B!U(B $B%&%#%K!pJsN.=P$G9q$rDsAJ!!4IM}$:$5$s$H;TL1CDBN(B ($BKhF|(B, 1/17)

$B!U(B $B$I$&$J$k!V(B2$B$A$c$s$M$kJD:?A{F0!W!=!=(B2007$BG/$O%M%C%H5,@)$,6/$^$k!)!Z%3%i%`![(B ($BF|7P(B, 1/17)

$B!U(B $BITFs2HJ}LL(B

$BITFs2HE9J^$G$b(I"$B>^L#4|8B@Z$l#O#K(I#(B ($B;%KZ%F%l%S(B, 1/17)
$BITFs2H!&:k6L9)>l!"4|8B@Z$l86NA$r2~A1;X<(8e$b;HMQ(B ($BF|7P(B, 1/17)
$B>>B<9($N(BNEWS$B$J4i(B: $BE9F,$+$i>C$($k1?L?$r>7$$$?$N$O(B (JANJAN, 1/16)
$B!V$J$$!W$O$:$N%^%K%e%"%k3NG'!!ITFs2H:k6L9)>lN)$AF~$j(B (asahi.com, 1/17)

$B!U(B $B!T(B ESPIO! $B!UD;1[=SB@O:;a$,!HIB>2!I$+$i#J#A#N#J#A#N5-$B!#(B

$B!!A}ED5-eAXIt$+$i%9%H%C%W$,$+$+$C$?$H$$$&!#(B
$B!!M}M3$ODj$+$G$O$J$$$,!"!V%*!<%^%$%K%e!<%9$NBP1~$rEvLL8+p$J$N$G$"$k!J0lBN2?$N$D$^$i$J$$6n$10z$-$r$d$C$F$$$k$N$+!*!K!#(B

$B!!(BJANJAN$B!"$*A0$b$+!#(B

$B!U(B $B5\:j$ND;%$%s%U%k$GITE,@ZI=<(#1#1#47o!"IwI>Ho32=uD9(B (asahi.com, 1/17)

$B!U(B $B ($BF|7P(B IT Pro, 1/16)$B!#!VFbItE}@)!W$O(B 4 $BJ8;z8@MU$G$9$+!#(B

$B!U(B $BBh#1#02s$^$C$A$c#1#3#9JY6/2q$NF|(B ($B$^$C$A$c$@$$$U$/$NF|5-(B)$B!#(B 2007.02.17$B!"5~ETI\5~ET;T!"(B2000 $B1_!#(B

$B!U(B $BLBOG%a!<%k!'#5#42/DLAw?.$N ($BKhF|(B, 1/16)$B!#%?%/%_DL?.$G$9$+!D!D!#(B

$BB.Js!*(I"$B%?%/%_DL?.(I#$B ($B?7!&$$$i$J$$%a!<%kE8<(2q(B, 1/16)
"$BM-8B2q ($BF|K\8l(BSPAM$B%G!<%?%Y!<%9(B)

$B!U(B $B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 6.5 Patch 8 $B8x3+$N$*CN$i$;(B ($B%H%l%s%I%^%$%/%m(B)$B!#(B1/22 $B8x3+M=Dj!#(B

$B!U(B $B%&%$%k%9%P%9%?!<(B2007 - 15.x: $B%M%/%=%s%8%c%Q%s ($B%H%l%s%I%^%$%/%m(B)$B!#(Bcrash $B$7$A$c$$$+$s$d$m!D!D!#(B $B2?$+$H$*A{$,$;$N!V(B $BIT?3%=%U%H%&%'%"7Y2|%7%9%F%`(B$B!W$rL58z$K$9$l$P2sHr$G$-$k$=$&$G$9!#(B

$B!U(B $B$R$m$f$-;a!V$^$@JD:?$9$k5$$O$J$$$G$9! (ITmedia, 1/17)

$B!U(B $B%&%$%k%9%P%9%?! ($B%H%l%s%I%^%$%/%m(B, 1/16)$B!#8=:_$OD>$C$F$$$k$h$&$G$9!#(BBenjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B"#(B $B$$$m$$$m(B (2007.01.17)
(various)

JVN#13939411: Drupal $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H$B!#(B Drupal 4.7.5 / 4.6.11 $B$G=$@5$5$l$F$$$k$h$&$G$9!#(B

KDE Security Advisory: kpdf/kword/xpdf denial of service vulnerability$B!#(B KOffice 1.2.1 / KDE 3.3.2 $B0J9_MQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B CVE-2007-0104

102760: Security Vulnerability in Processing GIF Images in the Java Runtime Environment May Allow an Untrusted Applet to Elevate Privileges (Sun)$B!#(B (J|S)DK / JRE 5.0 Update 10 / 1.4.2_13 / 1.3.1_19 $B0J9_$G=$@5$5$l$F$$$k!#(B $B4XO"(B:

[Full-disclosure] ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability
CVE-2007-0243

[SA23664] Linux Kernel Local Denial of Service Vulnerabilities

2007.01.30 $BDI5-(B:

$B!!(BSun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit

$B"#(B Oracle Critical Patch Update - January 2007
(Oracle, 2007.01.16)

$B!!(BOracle $BDj4|(B patch $B=P$^$7$?!#(B $B4XO"(B:

SYMSA-2007-001: Oracle Application Server 10g - Directory Traversal (Symantec)$B!#(B CVE-2007-0222
[ISecAuditors Security Advisories] Oracle Reports Web Cartridge (RWCGI60) vulnerable to XSS

2007.02.03 $BDI5-(B:

$B!!4XO"(B:

Oracle Buffer Overflow in DBMS_REPCAT_UNTRUSTED.UNREGISTER_SNAPSHOT (AppSecInc, 2007.01.18)
Oracle Buffer Overflow in DBMS_LOGMNR.ADD_LOGFILE (AppSecInc, 2007.01.18)
Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAME (AppSecInc, 2007.01.18)
Oracle Buffer Overflow in DBMS_DRS.GET_PROPERTY (AppSecInc, 2007.01.18)
Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD (AppSecInc, 2007.01.18)
Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNAL (AppSecInc, 2007.01.18)
Oracle 10g R2 Enterprise Manager Directory Traversal (NGS Software, 2007.01.31)
Sample 'Attack Request'
http://192.168.0.3:1158/em/dynamicImage/emSDK/chart/EmChartBean?beanId=\..\..\..\..\..\..\..\..\..\..\..\..\test.txt

$B"#(B $BDI5-(B

$B$$$m$$$m(B (2007.01.16)

$B!!(BMT $B$G(B nofollow $B%W%i%0%$%s$rL58z$K$9$k$H4m81(B ($B?eL57n$P$1$i$N$($SF|5-(B, 2007.01.17)$B!#(B Movable Type Security Bug $B$NOC!#I8=`$GM-8z$J(B nofollow $B%W%i%0%$%s$,M-8z$K$J$C$F$$$l$PL5LdBj$@$=$&$G$9!#(B

$B$$$m$$$m(B (2007.01.11)

$B!!(BVulnerability in Acer$B!G(Bs LunchApp.APlunch ActiveX control (SANS ISC)$B!#(B Acer $BOC!"(Bpatch $B$,=P$?$=$&$G$9!#(B

$B"#(B 2007.01.16

$B!U(B 2 $B$A$c$s$M$k$M$?(B

2ch$B%I%a%$%s:9$72!$5$(!V8= (ITmedia, 1/15)
$B!HJD:?A{F0!I#2$A$c$s$M$k!";K>e:GBg$N%M%C%HK=F0(B (ZAKZAK, 1/16)
$B:#EY$O$R$m$f$-;a$NGK;:$r?=$7N)$F(B (ZAKZAK / ITmedia, 1/16)
$B!!;JK!$K$O9bEY$JH=CG$,5a$a$i$l$k!#2L$?$7$FEl5~CO:[$O!"@>B<;a$r:DL3D62a$HG'$a$k$N$+!#(B
$B!!$"$kJ[8n;N$O!V@>B<;a$,:G6a!"$5$+$s$KG/<}(B1$B2/1_$H8@$C$F$$$?$N$O!"Bh;0

$B!U(B $B$J$<(BPHP$B%"%W%j$K%;%-%e%j%F%#%[!<%k$,B?$$$N$+(B?$B!!Bh(B1$B2s!!(BCVE$B$G$_$k(BPHP$B%"%W%j%1!<%7%g%s%;%-%e%j%F%#(B ($B5;I>(B, 1/15)

$B!U(B $B%/%j%(%$%F%#%V!&%3%b%s%:!"2a5n$NCx:n8">yEO7@Ls$N2r=|$r (Open Tech Press, 1/12)

$B!U(B OSSEC version 1.0 is now available $B$@$=$&$G$9!#(B$B%@%&%s%m!<%I(B$B!#;3K\$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!U(B $B!V%&%#%s%I%&%:#X#P!W$N%5%]!<%H4|8B!"BgI}$K1dD9(B (asahi.com, 1/16)$B!#$($'$C(B?! $BK\Ev$K(B?!

$B%^%$%/%m%=%U%HF|K\K!?M$O#1#5F|!"8D?M8~$1%Q%=%3%s4pK\%=%U%H!J#O#S!K!V%&%#%s%I%&%:#X#P%[!<%`%(%G%#%7%g%s!W$NMxMQe%5!<%S%9$r$9$k%5%]!<%H4|8B!J#0#9G/#17n!K$rBgI}1dD9$9$kJ}?K$rL@$i$+$K$7$?!#(B($BCfN,(B) $B4k6H8~$1#O#S!V%&%#%s%I%&%:#X#P%W%m%U%'%C%7%g%J%k!W$N%5%]!<%H$r=*$($k#2#0#1#4G/$rG0F,$K4|4V$r1d$P$9!#(B

$B!!!V%^%$%/%m%=%U%HF|K\K!?M$O!W$H$$$&ItJ,$,$b$N$9$4$/5$$K$J$k$s$G$9$1$I!#(BPressPass (Microsoft) $B$K$O2?$b$J$$$7$J$"!#!D!D$*!"KhF|$K$b(B: $B%&%#%s%I%&%:#X#P!'@=IJ%5%]!<%H$r1dD9!!JF#M#S ($BKhF|(B, 1/16)

$B!!%^%$%/%m%=%U%H!J#M#S!K$O#1#5F|!"?7#O#S!V%S%9%?!W$K@Z$jBX$o$k8=#O#S!V%&%#%s%I%&%:#X#P!W$N@=IJ%5%]!<%H$N=*N;;~4|$K$D$$$F!"M=Dj$7$F$$$?#0#9G/#17nKv$+$i1d4|$9$kJ}?K$rL@$i$+$K$7$?!##M#SF|K\K!?M$N%R%e!<%9%H%so$K=EMW$JLdBj$GA4@$3&%l%Y%k$G8!F$$7$F$$$k!#6a$/H/I=$,$"$k$@$m$&!W$H=R$Y$?!#(B

$B!!(B~~$B$I$&$d$i1dD9$5$l$k$3$H$O4V0c$$$J$$$_$?$$(B~~$B!#(B

$B!!!D!D?.Mj$G$-$k6Z$+$i!"%^%$%/%m%=%U%H$O!V1dD9$9$k!W$H$O8@$C$F$J$$!"$H$N>pJs$r$$$?$@$-$^$7$?(B ($B$"$j$,$H$&$4$6$$$^$9(B)$B!#(B $B>/$J$/$H$b!"7hDj;v9`$G$O$J$$$h$&$G$9!#(B $B!D!D(B Internet Watch $B$K=P$^$7$?$M(B: Windows XP Home Edition$B$N%5%]!<%H4|4V1dD9$O!V7hDj;v9`$G$O$J$$!W!!(B $B%^%$%/%m%=%U%H$,0lItJsF;$rH]Dj!VJF9qK\ (Internet Watch, 1/16)$B!#(B

$B$3$l$i$NJsF;$O!"(B15$BF|$K3+:E$5$l$?(BWindows Vista$B$N5-
$B!!$3$N0O$_XP Home$B$N%5%]!<%H1dD9$r8!F$!!(BMS$B%R%e!<%9%H%s ($B%U%8%5%s%1%$(B $B%S%8%M%9(Bi / ITmedia, 1/16)

$B(!(!5l(BOS$B$N!V%&%#%s%I%&%:(BXP$B!W$KBP$9$k%5%]!<%H4|8B$,C;$$$H$NHcH=$,$"$k(B
$B!!!V0lIt%P!<%8%g%s$O(B2009$BG/$^$G$@$,!"8=:_!"1dD9$NJ}8~$G8!F$$r$7$F$$$k!W(B

$B!!!V1dD9$NJ}8~$G!W$H8@$C$F$7$^$C$?$H$7$?$i!"$=$&$$$&5-;v$K$J$k$N$bL5M}$O$J$$$o$1$G!D!D!#(B

$B!!(B $B%^%$%/%m%=%U%H!"!V(BXP$B$N%5%]!<%H4|8B1dD9$O7h$^$C$F$$$J$$!W(B (PC Watch, 1/16)

$B!!$^$?!"%^%$%/%m%=%U%H$G$O!"!V0lItJsF;$G$O!"F|K\$rHi@Z$j$KA4@$3&$G%5%]!<%H4|8B1dD9$r9T$J$&$H$"$C$?$,!"%5%]!<%H4|8B$r1dD9$9$k$+H]$+$O!"F|K\FH<+$K7hDj$9$k$3$H$O9M$($K$/$$!#K|$,0l!"%5%]!<%H4|8B1dD9$H$$$&$3$H$K$J$l$P!"A4@$3&$GF1;~$KJQ99$H$J$k!W$HF|K\FH<+$N7hDj$OFq$7$$$H$N8+J}$r<($7$?!#(B

$B!!$=$j$c$=$&$@$h$M$(!#(B

$B!U(B $B%3%T!<%o%s%9LdBj$G2HEE%a!<%+!<$KJb$_4s$j$NF0$-!$J|Aw;v6HGE@(B ($BF|7P(B IT Pro, 1/12)

$B!U(B $BCOJ}@G!"BgH>$N%5%i%j!<%^%s$GG\A}(B $B!A%a%G%#%"$,A{$,$J$$$b$&0l$D$N@G@)2~3W!A(B ($BF|7P(B BP, 1/15)

$B!U(B Uninformed Vol.6 (uninformed.org)

Subverting PatchGuard Version 2
Locreate: An Anagram for Relocate
Exploiting 802.11 Wireless Driver Vulnerabilities on Windows

$B!U(B $BBh(B 2 $B2s(B Admintech.jp $B%3%_%e%K%F%#JY6/2q(B$B!#(B 2007.02.03$B!"El5~ET=BC+6h!"L5NA!#(B

$B!U(B $BBh(B61$B2s!!J82=D#7]=Q:W(B $B%F%l%SItLg!!Bg>^^!!%"%s%3!<%k(B: $BF|Cf@oAh!!$J$<@oAh$O3HBg$7$?$N$+(B (NHK $B%9%Z%7%c%k(B, 2/9 $BJ|AwM=Dj(B)

$B!U(B $B ($BF|7P(B IT Pro, 1/16)

$B!!4IM}pJs$H!$Ev3:$N1D6HC4EvpJs!K$r=E$M$FJ,@O$9$k!#$=$&$9$k$H!$$[$H$s$I$N>l9g!$IT2D;W5D$J6HL39TF0$,Ib$+$S>e$,$C$F$/$k$O$:$@!#(B

$B!U(B $B!V@$3&:G>.9q2H!WGc<}$K(BBitTorrent$B%5%$%H$,L>>h$j(B (ITmedia, 1/16)

$B%9%&%'!<%G%s$N(BBitTorrent$B%H%i%C%+!<%5%$%H(BThe Pirate Bay$B$,!"Gd$j$K=P$5$l$F$$$k%7!<%i%s%I8x9q$NGc<}$r7W2h$7$F$$$k!#(B

$B!!$&$R$c$"!#%G!<%?%X%V%s$G$9$+!#(B

$B!U(B $BITFs2H$N5a?M9-9p!";v7oH/3P$N(B4$BF|8e$K7G:\$5$lFI (PJ $BKY8}9d(B / $B%i%$%V%I%"(B, 1/16)$B!#0u:~$b$N$O$M$'!D!D!#(B

$B!U(B $B%U%87ONs!!!XH/7!!*$"$k$"$kBg<-E5(BII$B!Y!"J|1GA0$KFbMF$,Bge!K(B (PJ $BJf9b7r0l(B / $B%i%$%V%I%"(B, 1/14)

$B$3$N$?$S!"Ge$bA0$K!"GpJsDs6!$N0FFbJ8$@$C$?!#(B

$B!!D9Ln8)HSED;T$H$$$&$H!D!D(B$B00>>?)IJ(B?

$B!!(B$B%U%87ONs!!!XH/7!!*$"$k$"$kBg<-E5(BII$B!Y!"J|1GA0$KFbMF$,Bg (PJ $BJf9b7r0l(B / $B%i%$%V%I%"(B, 1/15) $B$b=P$F$^$7$?!#(B

$B!U(B $BD+F|?7J9Am6ID9$O>pJsN.=P!"#P#C$+$i30ItI. ($BFIGd(B, 1/16)$B!"(B $B%a!<%kN.=P!'D+F|?7J9Am6ID9$N#P#C$+$i!"%&%#%K!<2p$7(B ($BKhF|(B, 1/16)

$B!U(B $B!X=54)8=Be!Y$K5-;v(B ($B9u0fJ8B@O:$N!V%9%Q%$!u%F%m!W(B, 1/15)

$B!!8=:_!"%$%i%/$G$O%9%s%KGI$H%7!<%"GI$,$b$&Fb@o>uBV$KF~$C$F$$$k$H$$$C$F2a8@$G$O$J$$$,!"$3$l$O=!GIBPN)$H$$$&$h$j$O!"$b$C$HC1=c$K!V%?%@$N93Ah!W$@$H$$$&2r@b$r$I$3$+$GFI$s$@!#;d$bF10U8+$@!#(B
$B!!$?$^$?$^93Ah$NN>?X1D$,=!GI$GJ,$+$l$?$@$1$N$3$H!#%9%s%KGIF1;N$G$bM-NOuBV$K$"$k!#(B
($BCfN,(B)
$B!!$"$"$$$&9q$G $B!!$1$l$I!"$=$&$7$?%3%a%s%H$r%[%s%H$K$=$NH/8@ ($BCfN,(B)
$B!!$7$D$3$$$h$&$@$,!"!V%U%;%$%s$,1QM:!W!)!!$=$l$O$J$$$@$m$&$H;W$&!#(B

$B!U(B $B%7%^%s%F%C%/!"(BMobile AntiVirus 4.0 for Windows Mobile $B$rH/Gd(B ($B%7%^%s%F%C%/(B, 1/15)

$B!U(B $B!N(BWSJ$B!O(B $B!V6b$H@/<#$N%V%i%C%/%[!<%k!W$K$J$k(BGalileo$B7W2h(B (ITmedia, 1/16)$B!#$"$i$i$i!"$=$s$J>u67$@$C$?$H$O!#(B

$B!U(B $BITFs2HJ}LL(B$B!"$$$h$$$h@c0u2=$7$F$-$?$h$&$J!D!D!#(B

$B8xI=BU$j!"$:$5$s (asahi.com, 1/15)
$BITFs2H!'IT@5!V9)>l$0$k$_!W1R@85,Dj$b8=>l$GL5;k(B ($BKhF|(B, 1/15)
$BITFs2H!'%;%V%s!u%"%$$J$IN.DL3F&IJE15n(B ($BKhF|(B, 1/15)$B!#N6Bg@86((B~~$B$K$O$^$@$"$j$^$9(B~~$B$+$i$bE15n$5$l$F$7$^$$$^$7$?!#(B
$BITFs2H!' ($BKhF|(B, 1/15)
$BITFs2H!'%5!<%/%k#K%5%s%/%9$b>&IJE15n(B ($BKhF|(B, 1/16)
$BITFs2H!'4|8B@Z$l86NA;HMQ!! ($BKhF|(B, 1/16)
$BITFs2H!'4|8B@Z$l86NA;HMQ!! ($BKhF|(B, 1/16)

$B"#(B the Month of Apple Bugs #6$B!A(B#15
(MoAB)

$B!!BP>]$O!"4pK\E*$K$O(B Mac OS X 10.4$B!#(B

MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability$B!#(B Mac OS X Preview.app, Adobe Reader, xpdf $B$,L58B%k!<%W$d%a%b%jGK2u$r5/$3$9$h$&$J(B PDF $B%U%!%$%k$r:n@.$G$-!"$3$l$rDL$8$FG$0U$N%3!<%I$r

CVE-2007-0102
CVE-2007-0103
CVE-2007-0104
Month of Apple Bugs - Day 6 Fix Released (Landon Fuller)

MOAB-07-01-2007: OmniWeb Javascript alert() Format String Vulnerability$B!#(B CVE-2007-0148

MOAB-08-01-2007: Application Enhancer (APE) Local Privilege Escalation$B!#(B Landon Fuller $B;a(B $B$N:n@.$7$?(B patch $B$O(B Application Enhancer $B$rMxMQ$7$F$$$k$N$@$,!"$3$N(B Application Enhancer $B$K(B local user $B$,(B root $B8"8B$rCVE-2007-0162

$B4XO"(B:

Month of Apple Bugs - Day 8 (Landon Fuller)
Anatomy of the Runtime MoAB Patches (Landon Fuller)

MOAB-09-01-2007: Apple Finder DMG Volume Name Memory Corruption$B!#(B $B96N,(B .dmg $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$rCVE-2007-0197

MOAB-10-01-2007: Apple DMG UFS ffs_mountfs() Integer Overflow Vulnerability$B!#(B fs_mountfs() $B4X?t$K(B integer overflow $B$9$k7g4Y$,$"$kLOMM!#(BFreeBSD 6.1 $B$b3:Ev!#(B $B96N,(B .dmg $B%U%!%$%k(B (UFS) $B$K$h$C$FG$0U$N%3!<%I$rCVE-2007-0229

MOAB-11-01-2007: Apple DMG UFS byte_swap_sbin() Integer Overflow Vulnerability$B!#(B byte_swap_sbin() $B4X?t$K$b(B integer overflow $B$9$k7g4Y$,$"$j!"(B $B96N,(B .dmg $B%U%!%$%k(B (UFS) $B$K$h$C$F(B DoS $B$r

[SA23725] Apple Mac OS X UFS "byte_swap_sbin()" Denial of Service

MOAB-12-01-2007: Apple DMG UFS ufs_lookup() Denial of Service Vulnerability$B!#(B $B96N,(B .dmg $B%U%!%$%k(B (UFS) $B$K$h$C$F(B DoS $B$r
MOAB-13-01-2007: Apple DMG HFS+ do_hfs_truncate() Denial of Service Vulnerability$B!#(B $B96N,(B .dmg $B%U%!%$%k(B (HFS+) $B$K$h$C$F(B DoS $B$r
MOAB-14-01-2007: AppleTalk ATPsndrsp() Heap Buffer Overflow Vulnerability$B!#(B _ATPsndrsp $B4X?t$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(BAppleTalk $B$r;H$C$F$$$k>l9g$K(B remote $B$+$iG$0U$N%3!<%I$r

[SA23708] Apple Mac OS X AppleTalk "ATPsndrsp()" Denial of Service

MOAB-15-01-2007: Multiple Mac OS X Local Privilege Escalation Vulnerabilities$B!#(B local user $B$,(B root $B8"8B$r

$B"#(B $B$$$m$$$m(B (2007.01.16)
(various)

CVE-2007-0183$B!#(B iPlanet Web Server 4.x $B$K(B XSS $B7j$,$"$kLOMM!#(B

FON Router allows anonymous web access$B!#(B CVE-2007-0193

slocate leaks filenames of protected directories$B!#(B CVE-2007-0227

Movable Type Security Bug $B!#(BMovable Type 3.3 $B$K(B XSS $B7j$,$"$kLOMM!#(BMovable Type 3.34 $B$G=$@5$5$l$kM=Dj$_$?$$!#(B CVE-2007-0231

FreeBSD-SA-07:01.jail - Jail rc.d script privilege escalation$B!#(B FreeBSD 5.3 $B0J9_$N(B jail rc.d(8) $B%9%/%j%W%H$K$*$1$k(B symbolic link $B$N07$$$K7g4Y$,$"$j!"(Bsymlink attack $B$r
Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability $B!#(BSnort 2.6.1.2 $B$N(B GRE $B%W%m%H%3%k=hM}It$K(B integer underflow $B$9$k7g4Y$,$"$k!#(B

[SA23716] Snort Rule Matching Backtrack Denial of Service Vulnerability

2007.01.17 $BDI5-(B:

$B!!(BMT $B$G(B nofollow $B%W%i%0%$%s$rL58z$K$9$k$H4m81(B ($B?eL57n$P$1$i$N$($SF|5-(B, 2007.01.17)$B!#(B Movable Type Security Bug $B$NOC!#I8=`$GM-8z$J(B nofollow $B%W%i%0%$%s$,M-8z$K$J$C$F$$$l$PL5LdBj$@$=$&$G$9!#(B

2007.01.24 $BDI5-(B:

$B!!(BMovable Type 3.34$BF|K\8lHG$NDs6!$r3+;O(B (sixapart.jp)$B!#(BMovable Type Security Bug $B$NOC$,=$@5$5$l$F$$$^$9!#(B

2007.08.02 $BDI5-(B:

$B!!(BFreeBSD-SA-07:01.jail - Jail rc.d script privilege escalation [REVISED]$B!#(B FreeBSD 5.5 $BMQ$N(B patch $B$,=$@5$5$l$F$$$k!#(B

$B"#(B 2007.01.15

$B!U(B $B%9%W%l!<4L!'GKNvKI;_$K6H3&$,<+ ($BKhF|(B, 1/15)$B!#:G6a$N%9%W%l!<4L$K$OCf?HGS=P5!9=$H$$$&$b$N$,$D$$$F$$$k$N$G$9$+!#(B

$BGQ%(%"%>!<%k@=IJEy$NE,@5=hM}5Z$S%j%5%$%/%k$NB%?J$K8~$1$?%(%"%>!<%k@=IJEy6H3&$H;TD.B<$N ($B4D6->J(B, 2006.02.10)
$B%(%"%>!<%k4LEy$N%j%5%$%/%k(B ($B@/I\9-Js%*%s%i%$%s(B, 2006.07)
$B%9%W%l!<4L@=IJ$N;HMQ>e$N0BA4@-(B ($B9qL1@83h%;%s%?!<(B, 2006.11.08)$B!#Js9p=qA4J8$K$OGzH/;v8N$N:F8=
$B!U(B $B<+E> ($B9qL17r9/%;%s%?!<(B, 2006.10.06)

22$BLCJA$N6u5$F~$l$r(B15$BBf$:$D(B($B9g7W(B330$BBf(B)$B9XF~$7$?$H$3$m!"(B13$BLCJA!J(B69$BBf!K$K2?$i$+$N=i4|IT6q9g$,$"$j!"=$A6$;$:$K;HMQ$rB3$1$k$H4m81$JIT6q9g$,(B12$BLCJA(B(56$BBf(B)$B$K8+$i$l!"2;$,J9$3$($k6u5$O3$l$,#8LCJA(B(16$BBf(B)$B$G3NG'$5$l$?!#(B

$B!!=i4|ITNIB?$9$.$8$c$s!D!D!#(B

$B!U(B $BK\Ev$K2~A1$5$l$?(BSQL Server$B$N%;%-%e%j%F%#(B ($BF|7P(B IT Pro, 1/15)

$B!U(B [AML 11400] $BE>Aw!'F|K\?M$r$I$&!V7$B!#(B $B$*$b$7$m$=$&$@$J$"!#(B

$B!U(B [FreeBSD-Announce] FreeBSD 6.2 Released $B$@$=$&$G$9!#(B

freebsd-update(8) provides officially supported binary updates for security fixes and errata patches
Experimental support for CAPP security event auditing
OpenBSM audit command line tool suite and library

$B!!(BFreeBSD/i386 6.2-RELEASE Release Notes $B$h$j(B:

FreeBSD now runs on the Xbox, whose architecture is nearly identical to the i386. For details of the latest development, see http://www.FreeBSD.org/platforms/xbox.html.

$B!!F|K\8l%$%s%9%H!<%i$,$"$k$=$&$G$9(B: http://www.koganemaru.co.jp

$B!U(B $B%I%$%D%^%9%3%_%9%-%c%s!A7bDF>r9`:F$S!J>e!K(B (JANJAN, 1/8)$B!"(B $B%I%$%D%^%9%3%_%9%-%c%s!A7bDF>r9`:F$S!J2 (JANJAN, 1/15)

$B!U(B $B;00f4D;a4XO"(B

$B8xHqN.MQ5?OG$r9pH/$NBg:e9b8!858x0BItD9!"Fs?3$b (asahi.com, 1/15)
$B859b8!ItD9:[H=!'#2?3$b ($BKhF|(B, 1/15)
$B859b8!ItD9:[H=!'!VM>$j$K$R$I$$!W!!;00f4DHo9p!"ESCfB`Dn(B ($BKhF|(B, 1/15)

$B!!(B$B$B:[H=D9$G$9$+!D!D!#(B

$B!U(B $BF|K\D@KW!'? ($BKhF|(B, 1/15)

$B!U(B $BD;1[=SB@O:$5$s!"$7$C$+$j$7$F$/$@$5$$(B (JANJAN, 1/14)$B!#%*!<%^%$%K%e!<%9OC!#(B $B8D?ME*$K$O!"(B$B!T(BESPIO!$B!U(B $BD;1[=SB@O:;a%*!<%^%$%K%e!<%9<-G$A{F0$G2;@<5-O?8x3+!*!)(B (1/14) $B$K$"$k!"LnED7I@8;a$N(B

$B!VF|K\HG%*!<%^%$%K%e!<%9$OG!2?$K$"$k$Y$-$+!W$J$I$H$$$&!"FI $B!!$$$:$l$K$7$m!"JT=8D9$N<-G$A{F0$,:G$bBg$-$J%K%e!<%9$N0l$D$K$J$C$F$7$^$&!VF|K\HG%*!<%^%$%K%e!<%9!W$bA0ESB?Fq$G$"$k!#(B

$B$H$$$&0U8+$KF10U!#(B

$B"#(B 2007.01.14

$B!U(B $BD;%$%s%U%k%(%s%6!'9bIB86@-%&%$%k%98!=P!!5\:j$N7\BgNL;`(B ($BKhF|(B, 1/13)

$B!U(B $B2-FlCN;vA*(B: $BIM;MDE8xL@E^BeI=Be9T$r9pH/!!(B $B5u56;v ($B@V4z(B, 2006.11.16)$B!#$&$o!"$3$s$JOC$,$"$C$?$H$O!#(B

$B!U(B $BITFs2H#I#S#O!"7P;:>J$,NW;~?3::$rMW@A!DC$7$b(B ($BFIGd(B, 1/13)

$B!!ITFs2H$O#2#0#0#1G/$+$i#0#4G/$K$+$1!"9qFb#59)>l$G4D6-4IM}5,3J!V#I#S#O#1#4#0#0#1!W$NG'>Z$rZIt$H;q:`It$,IJ $B!!6(2q$O!">CHq4|8B@Z$l$N86:`NA$r;H$C$?MN2[;R$r=P2Y$7$F$$$?;~4|$,#0#6G/#1#0!A#1#17n$G!"IJ8e$G$"$kE@$r=E;k$7$F$$$k!#$5$i$K!"LdBj$,H=L@$7$F0J9_!":k6L9)>l$G5mF}$N:_8K5-O?$r;D$7$F$$$J$+$C$?$[$+!";%KZ9)>l$G$O86:`NA$N;EF~$l;~4|$J$I$r@=B$5-O?BfD"$K5-:\$7$F$$$J$$$J$I!"IJ $B!!$^$?!"ITFs2H$O#1#1F|$N2q8+$G!"!V:k6L9)>l$O#I#S#OG'>Z$rCHq4|8B@Z$l$N5mF}$r!KE]!W$H;vBV$r=E$/8+$F$$$k!#(B

$B!!$^$5$KK\KvE>E]$J$N$@$1$l$I!"$3$&$$$&;vNc$OB>$K$b$"$j$=$&$@$h$J$"!#(B

$B!U(B $BElL>9bB.$G%8%g%$%s%H30$l;v8N!!#1#0#0#0%+=j$r6[5^E@8!(B (asahi.com, 1/13)$B!#F;O)$H66$r$D$J$0%8%g%$%s%H$,30$l$F$$$?$N$@$=$&$@!#(B

$B!U(B $B%U%;%$%s85BgE}NN!VNi;?!W!"%"%i%V$N41L1$K9-$,$k(B ($BFIGd(B, 1/13)

$B"#(B 2007.01.13

$B!U(B $B;R$I$b%b%G%k!'H?6A#3#0#07o0J>e!V2y$7$/$F$?$^$j$^$;$s!W(B ($BKhF|(B, 1/12)

$B:#7n$KF~$j!"<+7$/$h$&$J?7J9JsF;$,$"$j$^$7$?$,!"J@O$r7G:\$7$F$$$k!#(B

$B!!$3$l$G$9$J(B: $B%b%G%k%(!<%8%'%s%7!

$B$3$NEY!";R6!%b%G%k%(!<%8%'%s%7!<$K$D$$$F$N8m2r$r>7$/$h$&$J?7J9JsF;$,$"$j$^$7$?$,!"J@ $B3'MM$K$O!"$4?4G[$r$*$+$1$7$F$$$k$3$H$+$HB8$8$^$9$,!"2?B4$4M}2r$NDx59$7$/$*4j$$$$$?$7$^$9!#(B

$B"#(B 2007.01.12

$B!U(B $BITFs2H!':k6L9)>l!"0BA44IM}%^%K%e%"%k$J$7(B ($BKhF|(B, 1/12)$B!"(B $BITFs2H!&;%KZ9)>l!"86:`NA;EF~$l;~4|$rBfD"5-:\$;$:(B ($BFIGd(B, 1/12)

$B!U(B $B;3C+9d;K$N%^%s%9%j! (Internet Watch, 1/12)

$B!U(B $B!V(B2ch.net$B!W%I%a%$%s:9$72!$5$(!)(B (ZAKZAK / ITmedia, 1/12)$B!#(B $B4XO"!'(B

$B#2$A$c$s$M$k@B$C$F%h%7!)(B $B!A4IM}?M1@1#$l$N??Aj!!A(B (ZAKZAK, 2006.11.04)
$B#2$A$c$s$M$k@B$C$F%h%7!)(B $B!A4IM}?M1@1#$l$N??Aj!!A(B (ZAKZAK, 2006.11.11)
$B7G:\5-;v!J#17n#1F|#1LL!KFqIB;yJg6b$"$6$1$k!V:W$j!W(B ($B$^$$$^$$%/%i%V(B, 1/1)
$B7G:\5-;v!J#17n#1F|#2LL!K!V%(%5!WAm$,$+$j$GK=O*(B ($B$^$$$^$$%/%i%V(B, 1/1)
$B7G:\5-;v!J#17n#1F|#3LL!K#2#c#h4IM}?M$KJ9$/(B ($B$^$$$^$$%/%i%V(B, 1/1)

$B!U(B $B%f%K%P!<%5%k$JCf4V (RSA, 1/10)

$B!U(B $BF|K\?M#5?M!"%]%m%K%&%`$KHo$P$/!)1QJ]7rEv6I$+$iDLCN(B ($BFIGd(B, 1/12)

$B!U(B $B%+%(%k;&$9%+%SF|K\>eN&!"N.9T$9$l$P@dLG$N4m5!$b(B ($BFIGd(B, 1/12)$B!#%+%(%k!&%D%\%+%S>I$H$$$&$N$@$=$&$G$9!#(B

$B$3$NIB5$$O!"??6]$N0l@8N`$,2uLGE*$JHo32$r
$B!!(B$BN>@8N`@dLG$5$;$k%+%(%k!&%D%\%+%S>I!"9qFb$G=i3NG'(B (asahi.com, 1/12) $B$K?^F~$j$G2r@b$5$l$F$$$^$9!#(B

$BCfJF%Q%J%^$G$ON>@8N`#4#8$+$iEl$K9-$,$C$?$3$H$,8e$ND4::$GJ,$+$C$?!##2%+7n$GLn@8$N%+%(%k$,@dLG$7$?CO0h$b$"$j!"Fs==?t@8N`H"A%7W2h!W$,;O$^$C$?!#(B

$B!U(B $BD;%$%s%U%k%(%s%6J}LL(B

$B5\:j8)$GD;%$%s%U%k%(%s%6$N5?$$!!Ls#7#5#01);`K4(B (asahi.com, 1/12)
$B?M$K46@w$[$\$J$7!!G;8|$J@\?($O4m81!!D;%$%s%U%k%(%s%6(B (asahi.com, 1/12)
$BB>CO0h$XGH5Z7Y2|!!4Z9q$G6/FG@-H/@8!!D;%$%s%U%k%(%s%6(B (asahi.com, 1/12)
$BD;%$%s%U%k%(%s%66/FG@-$+!!5\:jBgNL;`!!A49q6[5^8!::$X(B (asahi.com, 1/12)
$BF16H!W$K%T%j%T%j!!5\:j$ND;%$%s%U%k%(%s%6(B (asahi.com, 1/12)
$B6e=#G@@/6I$O!">CHqpJsDs6!$r;O$a$?!#!V7\Fy$d7\Mq$r?)$Y$F$b?M$K46@w$7$J$$!#IwI>Ho32$rKI$0$?$a$K$bNd@E$KBP1~$r!W$HMWK>!#0{?)E9$J$I$G!V5\:j8);:$O07$C$F$$$^$;$s!W$H$$$C$?I=<($,=P$J$$$+$J$I$bD4::$9$kM=Dj$@!#(B

$B!!$3$s$JOC$b$"$k$=$&$G(B: $BLnD;$NL)ND5^A}!!D;%$%s%U%k$GM"F~5,@)!"9qFbIJGv$K(B (asahi.com, 1/9)

$B!U(B Windows Vista$B$r9%$-$K$J$l$J$$M}M3(B (PC Watch, 1/5)

$BKAF,$K=q$$$?$h$&$K!"$9$G$KIaDL$N%"%W%j%1!<%7%g%s$rF0$+$9$H8@$&0UL#$G$O!"==J,$J(BCPU$B%Q%o!<$H%a%b%j6u4V$rB?$/$N(BPC$B$,Hw$($F$$$k!#$7$+$7!"$=$l0J>e$N%9%Z%C%/$r(BOS$B$,MW5a$7!"2>$KK~$?$7$?$H$7$F$b$4Mw$NDxEY$N:9$7$+L5$$!#%j%=!<%9$X$NEj;q$,3d$K9g$o$J$$$H;W$o$l$F$b;EJ}$N$J$$>uBV$J$N$@!#(B

$B"#(B Important Security Notice for BrightStor ARCserve Backup
(CA, 2007.01.11 $B99?7(B)

$B!!(BWindows $BHG$N(B CA BrightStor ARCserve / Enterprise Backup 9.x$B!A(B11.5$B!"(BCA Protection Suites r2 $B$K7g4Y!#(BBrightStor ARCserve Backup Tape Engine $B%5!<%S%9!"(BMediasvr $B%5!<%S%9!"(BASCORE.dll $B%U%!%$%k$K7g4Y$,$"$j!"(Bremote $B$+$i(B SYSTEM $B8"8B$r

ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability$B!#(B CVE-2007-0168
ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability$B!#(B CVE-2007-0169
ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability$B!#(B CVE-2007-0169
Computer Associates Brightstor ARCserve Mediasvr.exe $B$G$N%*!<%P!<%U%m!<(B (ISSKK)$B!#(B CVE-2006-5171
Computer Associates Brightstor ARCserve Mediasvr.exe $B$NJ8;zNs=hM}$G$N%*!<%P!<%U%m!<(B (ISSKK)$B!#(B CVE-2006-5172
CA BrightStor ARCserve (tapeeng.exe) Remote Buffer Overflow Exploit (milw0rm)

$B!!(BBrightStor ARCserve / Enterprise Backup 9.x$B!A(B11.5 $BMQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B

$B"#(B $BDI5-(B

$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B: 2007.01

$B!!(BDetection and deployment guidance for the January 9, 2007 security release (Microsoft)

Microsoft Excel $B$N@H

$B!!(BKB $B=P$^$7$?(B: Excel 2000 $B$O!"5-:\$5$l$?%;%-%e%j%F%#99?7%W%m%0%i%`(B 925524 $B$N%;%-%e%j%F%#>pJs(B MS07-002 $B$G%$%s%9%H!<%k8e!"$$$/$D$+$N%U%!%$%k$r3+$1$^$;$s(B (Microsoft)

$B$3$NLdBj$O(B Excel 2000 $B$,pJs$r=hM}$9$kJ}K!$,860x$GH/@8$7$^$9!#(B

$B!!>e5-$O<+F0K]Lu$K$h$k$b$N!#(B$B1Q8lHG(B$B$G$O$3$&$$$&J8>O(B:

This problem occurs because of the way in which Excel 2000 processes the phonetic information that is embedded in files that are created by using Excel 2000 in the Korean, Chinese, or Japanese executable mode.

$B!!2sHr:v$H$7$F$O(B Excel Viewer 2003 $B$d(B Excel 2002 / 2003 $B$NMxMQ$,5s$2$i$l$F$$$k!#(B

$B"#(B 2007.01.11

$B!U(B Network Security Forum 2006 $B!XFbItE}@)$r;Y$($k(BIT$B%;%-%e%j%F%#!Y(B $B%+%s%U%!%l%s%99V1i;qNA$r8x3+$$$?$7$^$7$?(B (JNSA)$B!#(B3/31 $B$^$G8x3+$@$=$&$G$9!#(B

$B!U(B $B ($B4XAHD9$NEl5~!&1JEDD.%m%S!<3hF0F|5-#b#l#o#gHG(B, 1/9)

$B!U(B $B9bLnO"!'%U%8%F%l%S$K935D!*$a$A$c!_#2In?+$5$l$?(B ($BKhF|(B, 1/11)$B!#9bLnO"$K$O%9%k!
$B!U(B $BBg@Z$J$N$O!H$D$J$,$k0B?4!I$H!H$D$J$,$i$J$$0B?4!I(!(!(Bau$B$,9M$($k?F;R$N7HBS(B (ITmedia, 1/10)

$B!U(B $BITFs2HJ}LL(B

$BITFs2H!"A4E9$GMN2[;RHNGd5Y;_!!4|8B@Z$l5mF};HMQ$,H=L@(B (asahi.com, 1/11)
$BBgCHq4|8B$,@Z$l$?5mF}$r;H$C$F%7%e!<%/%j!<%`Ls#1K|#6#0#0#08D$r@=B$$7!"4XEl$J$I$K=P2Y$7$F$$$?$3$H$,J,$+$C$?!#F1
$B!V (asahi.com, 1/11)
$B?)IJJ]B8$OI=<($r3N$+$a>e ($BEl5~$/$i$7$M$C$H(B, 2004.05)
$B!V>CHq4|8B!W$O!"IJCHq4|8B$r
$B4|8B@Z$l5mF};H$&!"ITFs2H$,MN2[;RHNGd$r5Y;_(B ($BFIGd(B, 1/11)
$BMN2[;R!V%7%e!<%m!<%k!W$K$D$$$F!":Y6]8!::$G?)IJ1R@8K!$N5,Dj$rLs#1#0G\$b>e2s$k:Y6]?t$,8!=P$5$l$?$K$b$+$+$o$i$:!"$=$N$^$^=P2Y$7$F$$$?$3$H$bG'$a$?!#(B

$BITFs2H%[!<%`%Z!<%8(B$B!#(B $B!VITFs2H:k6L9)>l$G$N4|8B@Z$l86NA$J$I$N;HMQ$K$D$$$F!J$*OM$S$H$4Js9p!K!W$,7G:\$5$l$F$$$^$9!#(B

$B!!@c0u$N6571$O$b$&K:$l$i$l$F$7$^$C$?$N$@$m$&$+!#(B

$BITFs2H!"4|8B@Z$l5mF};HMQ(B: $B?7:B$N9)>l!"%7%e!<%/%j!<%`(B2000$B8D@=B$!!(B10$BET8)$K=P2Y!"8xI=$;$:(B ($B:k6L?7J9(B, 1/11)
$B!V>CHq4|8B@Z$l86NA$N;HMQ$,%^%9%3%_$KH/3P$9$l$P!"@c0uF}6H$NFs$NIq$$$H$J$k$3$H$OHr$1$i$l$J$$!W!#4|8B@Z$l5mF}$r;H$C$?%7%e!<%/%j!<%`$r@=B$!"=P2Y$7$?LdBj$r$a$0$j!"ITFs2H$,0lIt44It$i$K8BDj$7$FG[I[$7$?FbItJ8=q$N5-=R$K$O!"IT>M;v1#$Z$$$N0U?^$,$&$+$,$($k!#(B
$B@c0u$N6571$O!V%P%l$?$i%d%t%!%$!W$G$O$J$/$F!V1#$7$?$i%d%t%!%$!W$@$H;W$&$N$G$9$1$I!D!D!#$=$&$$$&0UL#$G$O@c0u$^$C$7$0$i$K$J$C$F$$$k$h$&$J!#(B

$B!U(B $B%M%C%H>e$N%W%i%$%P%7!M@TLB;!"H/?.pJs3+<($X%,%$%I%i%$%s(B (Internet Watch, 1/10)

$B!U(B $B%U%!%$%k8r49%=%U%H$K$h$kCx:n8"?/32!"H/?.pJs$N3+<( (Internet Watch, 1/10)

$B!U(B $B%Y%i%k!<%7$,86L}$N4X@GE1GQ!"O*$O6!5k:F3+$X(B ($BFIGd(B, 1/10)$B!#%Y%i%k!<%7$,@^$l$^$7$?!#(B

$B!U(B $B!V(BiPhone$B$O<+&I8!W!!%7%9%3$,%"%C%W%k$rDsAJ(B (CNN, 1/11)$B!"(B$B%7%9%3%7%9%F%`%:!"(BiPhone$B$N>&I88"?/32$G%"%C%W%k$rDsAJ(B (CNET, 1/11)$B!#$"$i$i!"9g0U$G$-$F$$$?$o$1$8$c$J$+$C$?$N$+!#(B

$B!U(B $BCN$C$F$*$-$?$$!*%7%9%F%`>c32;~$K;H$&1Q8l!!(BPart2 ($BF|7P(B IT Pro, 1/11)$B!#(Bcomputer forensic $B$r$d$k$J$i(B investigation $B$G$b$$$$$s$@$m$&$1$I!#(B

$B!U(B $B%7%9%F%`1?MQC4Ev ($B%3%s%T%e!<%?%=%U%H%&%'%"6(2q(B, info from $BMU$C$QF|5-(B)$B!#(B 2007.01.29$B!"El5~ET@iBeED6h!"0lHL!'(B1,000$B1_!#(B $B!V?7(BJIS$B%U%)%s%H0\9T!W$H$$$&%?%$%H%k$HN)>l$,$=$b$=$bLdBj$J$s$8$c$J$$$N$+$H$$$&5$$,$9$k$s$@$1$I$J$"!#(B $B$J$
$B!U(B SUS 1.0 Information around Tuesday's Release (MSRC blog, 1/10)$B!#(B

At this time, we expect that the updates will be released through SUS 1.0 in the morning (Pacific Time) on Thursday January 11, 2007.

$B!!F|K\;~4V$@$H(B 1/12 $B$G$7$g$&$+!#(B 894199: Description of Software Update Services and Windows Server Update Services changes in content for 2006 (Microsoft) $B$b;2>H!#:$j!"MQ0U$7$F$"$C$?(B WSUS $B$K$($$$d$C$H@Z$jBX$($F$7$^$$$^$7$?!#(B

$B!U(B $B%U%;%$%s$N;`7:2hA|N.=P$GO*Dh!"CfEl$rMI$k$,$9#7$D$N7|G0(B (BNN, 1/10)$B!"(B $B%U%;%$%s=h7:$N0UL#(B (asahi.com, 1/9)

$B!U(B $BM-NO5D0w$iITF)L@;vL3=jHq!"%?%@$N5D0w2q4[$G#7@iK|$b(B ($BFIGd(B, 1/11)$B!#$_$J$5$s!"$9$P$i$7$$%I%s%V%j$r$*;}$A$G!#(B

$B!U(B $BF|K\HG#N#S#C4XO"K!0F!"DL>o9q2qDs=P$X!!@/I\J}?K(B (asahi.com, 1/11)

$B!U(B NHK $B%9%Z%7%c%k(B: $B%$%s%I$N>W7b!!!A#1#12/?M$,@$3&$rJQ$($k!A!!(B

$BBh#12s!!@$3&$r@J4,$9$k%9!<%Q!!J2>!K(B
$BBh#22s!!GzH/$9$k(B11$B2/$N>CHq%Q%o!!K(B
$BBh#32s!!(B21$B@$5*$NBg9q$X$NF;(B $B!A308r!&7P:Q@oN,$N2]Bj!A!J2>!K(B

$B!U(B $B56F|K\1_#1#12/#5@iK|1_!"%&%/%i%$%J$G8+$D$+$k(B (asahi.com, 1/11)$B!#2/C10L$C$F!D!D!#(B

$B"#(B $BDI5-(B

Microsoft Excel $B$N@H

$B!!$h$&$d$/=P$^$7$?$+(B: MS07-002 $BE,MQ8e$NIT6q9g(B (Excel 2000) ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2007.01.11)

$B"#(B PC$B@$3&$N%j%U%)!<%`:>5=!"!V%_%9%j!<%G%#%s%0%"%W%j!W$C$F2?$@!)(B
(ITmedia, 2007.01.11)

$B!!:G6a$O(B WinFixer $B$H$+(B SystemDoctor $B$H$+$r!V(B$B%_%9%j!<%G%#%s%0!&%"%W%j%1!<%7%g%s(B$B!W$H8@$&$N$G$9$+(B? $B%7%^%s%F%C%/MQ8l(B?

$B"#(B Vector Markup Language $B$N@H
(Microsoft, 2007.01.10)

$B!!(BWindows 2000 / XP / Server 2003$B!"(BIE 5.01 / 6 / 7 $B$K7g4Y!#(B Vector Markup Language (VML) $B$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$K$h$C$FG$0U$N%3!<%I$r

CVE-2007-0024
iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability
Microsoft Internet Explorer $B$G$N(B VML $B%l%3!<%I$K$h$k%P%C%U%!%*!<%P!<%U%m!<(B (ISSKK)

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(BWindows Vista gold $B$K$3$N7g4Y$O$J$$$,!"(B Vista RC1 $B$K$O$"$k$N$GCm0U!#(BRC1 $BMQ$N(B patch $B$,B8:_$9$k!#(B

2007.01.18 $BDI5-(B:

$B!!(BMS07-004 VML integer overflow exploit (milw0rm)

$B"#(B Microsoft Outlook $B$N@H
(Microsoft, 2007.01.10)

$B!!(BOutlook 2000 / 2002 / 2003 $B$K(B 3 $B$D$N7g4Y!#(B

Microsoft Outlook $B$N(B VEVENT $B$N@HCVE-2007-0033
$B4XO"(B: Microsoft Outlook $B$K$*$1$k(B .iCal $B2q5DMW5a$N(B VEVENT $B$K$h$k%P%C%U%!%*!<%P!<%U%m!<(B (ISSKK)
Microsoft Outlook $B$N%5!<%S%95qH]$N@HCVE-2006-1305
Microsoft Outlook $B$N9bEY$J8!:w$N@HCVE-2007-0034
$B4XO"(B:

Microsoft Outlook $B$G$N(B .oss $B%U%!%$%k$K$h$k%P%C%U%!(B $B%*!<%P!<%U%m!<(B (ISSKK)
Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$?$@$7(B patch $B$rE,MQ$9$k$H!"(B Office Saved Searches (.oss) $B%U%!%$%k(B ($B8!:w>r7o$rJ]B8$9$k%U%!%$%k$@$=$&$G$9(B) $B$r(B Outlook $B$GJ]B8$7$?$j3+$$$?$j$G$-$J$/$J$k!#(B $B$R$-$D$E$-(B .oss $B%U%!%$%k$rl9g$O!"(B KB925542 $B$N;X<($K=>$C$F%l%8%9%H%j$r@_Dj$9$k!#(B

$B!!4XO"(B: Back up or recreate a Search Folder (Microsoft)

$B"#(B Microsoft Office 2003 $B$N%]%k%H%,%k8l(B ($B%V%i%8%k(B) $B$NJ8>O9;@5%W%m%0%i%`$N@H
(Microsoft, 2007.01.10)

$B!!%]%k%H%,%k8l(B ($B%V%i%8%k(B) $BHG$N(B Office 2003 $B$K4^$^$l$kJ8>O9;@5%W%m%0%i%`$K7g4Y$,$"$j!"(Bbuffer overflow $B$,H/@8!"G$0U$N%3!<%I$r$N8@8lHG$N(B Office 2003 $B$K$O$3$N7g4Y$O$J$$!#(B CVE-2006-5574

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

$B"#(B $B$$$m$$$m(B (2007.01.11)
(various)

Acer$B$N%N!<%H(BPC$B$K@H (ITmedia, 2007.01.10)$B!#(BLunchApp.ocx $B$K7g4Y$,$"$k$=$&$G!#(B

[KDE Security Advisory] ksirc Denial of Service vulnerability$B!#(BKDE 3.5.5 $B0JA0$,3:Ev!#(BKDE 3.5.6 $B0J9_$G$O=$@5$5$l$F$$$k!#(B KDE 3.5.5 $BMQ$N(B patch $B$,8x3+$5$l$F$$$k!#(B

MIT krb5 $BOC(B

MITKRB5-SA-2006-002: kadmind (via RPC lib) calls uninitialized function pointer$B!#(Bkrb5-1.4 $B!A(B krb5-1.4.4$B!"(B krb5-1.5 $B!A(B krb5-1.5.1 $B$,3:Ev!#(Bkrb5-1.6 $B$G=$@5$5$l$F$$$k!#(Bpatch $B$,8x3+$5$l$F$$$k!#(B CVE-2006-6143
MITKRB5-SA-2006-003: kadmind (via GSS-API lib) frees uninitialized pointers$B!#(Bkrb5-1.5 $B!A(B krb5-1.5.1 $B$,3:Ev!#(Bkrb5-1.6 $B$G=$@5$5$l$F$$$k!#(Bpatch $B$,8x3+$5$l$F$$$k!#(B CVE-2006-6144

[Full-disclosure] CA BrightStor ARCserve Backup Tape Engine Exploit Security Notice$B!#(B CA BrightStor ARCserve (tapeeng.exe) Remote Buffer Overflow Exploit (milw0rm) $B$N;v$+(B? BrightStor ARCserve Backup r11.5 $B$G$O=$@5$5$l$F$$$k$=$&$@!#(B port 6502 $B$X$N%"%/%;%9$N@)8B$b?d>)$5$l$F$$$k!#(B

APSB07-02: Patch available for ColdFusion MX 7 and JRun 4 information disclosure issue (Adobe)$B!#4XO"(B:

CVE-2006-5858
iDefense Security Advisory 01.09.07: Adobe Macromedia ColdFusion Source Code Disclosure Vulnerability

Cisco Security Advisory: Cisco Unified Contact Center and IP Contact Center JTapi Gateway Vulnerability

Cisco Security Advisory: DLSw Vulnerability

2007.01.17 $BDI5-(B:

$B!!(BVulnerability in Acer$B!G(Bs LunchApp.APlunch ActiveX control (SANS ISC)$B!#(B Acer $BOC!"(Bpatch $B$,=P$?$=$&$G$9!#(B

$B"#(B [ANNOUNCE] X.Org Security Advisory: multiple integer overflows in dbe and render extensions
(X.Org, 2007.01.10)

$B!!(BX.Org 6.x / 7.x $B$N(B X $B%5!<%P$K7g4Y!#(B ProcDbeGetVisualInfo(), ProcDbeSwapBuffer(), ProcRenderAddGlyphs() $B4X?t$K7g4Y$,$"$j!"(Brender $B%b%8%e!<%k$d(B dbe $B%b%8%e!<%k$r%m!<%I$7$F$$$?>l9g$K!"(BX $B%5!<%P$K%"%/%;%9$G$-$k%f!<%6$,(B root $B8"8B$r

iDefense Security Advisory 01.09.07: Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability
CVE-2006-6101
iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeGetVisualInfo Memory Corruption Vulnerability
CVE-2006-6102
iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeSwapBuffers Memory Corruption Vulnerability
CVE-2006-6103
[SA23670] X.Org X11 "DBE" and "Renderer" Extensions Vulnerabilities

$B!!(BX.Org 6.8.2 / 6.9 / 7.0 / 7.1 $BMQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B

$B!!$3$N7g4Y$O(B XFreeX86 4.x $B$K$b$"$k$h$&$@!#(B

[SA23684] XFreeX86 "DBE" and "Renderer" Extensions Vulnerabilities

$B"#(B 2007.01.10

$B!U(B $B#6#8#m$N5pBgIw$NE]2u(B ($BFIGd(B, 1/10)

$B!U(B $B$^$@$^$@(B Winny

$BKhF|?7J9$^$?$^$?%^%kHk>pJsN.=P!D8D?M>pJs!uFbItJ8=q(B (ZAKZAK, 1/9)$B!"(B $BKhF|?7J9$NFIpJs$,:F$SN.=P!"HNGdE9 (Internet Watch, 1/10)$B!"(B $BKhF|?7J9HNGd=j$+$i8\5R>pJs$J$I$,N.=P(B (slashdot.jp, 1/9)
$BN&<+$N>pJsN.=P#2#77o!"KI;_:v8e$b#47o$,?7$?$KH=L@(B (Yahoo / $BFIGd(B, 1/9)
$BKI:R4X78;qNA$,%M%C%HN.=P!a?&0w$,;dJ*%Q%=%3%s$G%&%#%K! (Yahoo / $B;~;v(B, 1/6)
$B>pJsN.=P!'8)$NJ8=q#4#97o$,N.=P!!%&%#%K!<2p$7$F!"?&0w$N;dJ*%Q%=%3%s$+$i!!!?0&I2(B (Yahoo / $BKhF|(B, 1/7)
$B>pJsN.=P!';0=ECf1{0eNE%;%s%?!<$NFbIt>pJs!"%&%#%K!<7PM3$G%M%C%H$K!!!?;0=E(B (Yahoo / $BKhF|(B, 1/10)

$B!U(B China Watch$B"!#2#0#0#7G/#17n#1#0F|!!1x?&E&H/!|KL5~;T!|30;q7O4k6H!|9q2HLt4F6I(B (JANJAN, 1/10)

$B!U(B $BCfEl!'OC$,$&$^$9$.$k%7%j%"$NDs0F(B (JANJAN, 1/10)

$B!U(B $B%(%8%W%H@/I\!"Fb@o$r62$lD4Dd$X(B (JANJAN, 1/10)

$B!U(B 110$BHV(B/119$BHV$G0LCVDLCN!"7HBS3F ($B%1!<%?%$(B Watch, 1/10)$B!#(B118 $BHV$b!#$H$$$&$+!"(B118 $BHV$@$1$OA49q%5%]!<%H$J$N$K!"%?%$%H%k$KF~$l$F$b$i$($J$$$N$,ITXb$@!#(B

$B!U(B $B%5%$%P!<%/%j!<%s%;%s%?!<$N(BCCC.com$B$N4F;k$r$7$F$$$k$1$I(B2006$BG/(B12$B7n(B20$BF|$+$i99?7$5$l$J$$7o$K$D$$$F(B ($B$^$C$A$c$@$$$U$/$NF|5-(B, 1/10)$B!#3N$+$K!D!D!#(Bauto_tsc $B$NJ}$O2?EY$b99?7$5$l$F$$$k$s$G$9$1$I$M$(!#(B

$B!U(B $B%J%>$NCDBN!"#1#02/1_#C#M96@*!DA49q;f$NBgH>!H@)GF!I(B: $B@;=qFI$a!"Cf@dH?BP!D%-%j%9%H651&GI$H4X78?<$/(B (ZAKZAK, 1/9)

$BJF9q$N=!65;v>p$K>\$7$$$"$k65pJs$,

$B"#(B $BDI5-(B

$B0U30$HCN$i$l$F$$$J$$!)!!(BDNS$B$,Jz$($k%;%-%e%j%F%#LdBj(B

$B!!L1ED$5$s$N;qNA$,2~D{$5$l$F$^$7$?(B: $BC;$$(BTTL$B$N%j%9%/(B (2006$BG/(B12$B7n(B27$BF|=$@5HG(B) (JPRS)$B!#(B 6 $BKgL\$H(B 7 $BKgL\$N?t<0$,JQ99$5$l$F$$$kB>$K$b$$$/$D$+0c$$$,!#(B 9 $BKgL\$H(B 10 $BKgL\$,!V3NN)!W$K$J$C$F$^$9$,!D!D!#(B

Adobe Acrobat Reader Plugin - Multiple Vulnerabilities

$B!!(BAdobe Reader / Acrobat 7.0.9 $B%"%C%W%G!<%H$,8x3+$5$l$^$7$?!#(BAdobe Reader / Acrobat 7.0.x $B$NMxMQ

APSB07-01: Update available for vulnerabilities in versions 7.0.8 and earlier of Adobe Reader and Acrobat (Adobe, 2007.01.09)

$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B: 2007.01

$B!!(B4 $B7o=P$^$7$?!#(B1 $B7n$N%;%-%e%j%F%#(B $B%j%j!<%9(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2007.01.10) $B$h$j(B:

$B:#7n$N;vA09pCN$G$O!"Ev=i(B 8 $B7o$H$*CN$i$;$7$F$$$^$7$?$,!"(B4 $B7o$KJQ99$7$^$7$?!#(B $B$3$l$O!"99?7%W%m%0%i%`$NIJ

$B"#(B Microsoft Excel $B$N@H
(Microsoft, 2007.01.10)

$B!!(BExcel $B$K(B 5 $B

Microsoft Excel $B$NIT@5$J7A<0$N(B IMDATA $B%l%3!<%I$N@HCVE-2007-0027
Microsoft Excel $B$NIT@5$J7A<0$N%l%3!<%I$N@HCVE-2007-0028
Microsoft Excel $B$NIT@5$J7A<0$NJ8;zNs$N@HCVE-2007-0029
Microsoft Excel $B$NIT@5$J7A<0$NNs$N%l%3!<%I$N@HCVE-2007-0030
$B4XO"(B: iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability
Microsoft Excel $B$NIT@5$J7A<0$N%Q%l%C%H(B $B%l%3!<%I$N@HCVE-2007-0031
$B4XO"(B: iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability

$B!!$$$:$l$b(B 0-day $B$G$O$J$$!#(B

$B!!(BExcel 2000 / XP (2002) / 2003, Excel Viewer 2003, Works Suite 2004 / 2005, Office 2004 for Mac, Office v. X for Mac $BMQ$N(B patch $B$,=P$F$$$k!D!D$N$G$9$,!">/$J$/$H$b(B Excel 2000 $BMQ$N(B patch $B$K$O!VE,MQ$9$k$H(B Excel $B%U%!%$%k$r3+$/$3$H$,$G$-$J$/$J$k>l9g$,$"$k!W$H$$$&CWL?E*$JI{:nMQ$,B8:_$9$k$3$H$r!"

Microsoft Update$B$7$?$i(Bage$B$k%9%l(B 28: #304 $B0J9_(B (2 $B$A$c$s$M$k(B)
[memo:9198] MS07-002$BI{:nMQ(B $B0J2<$N%9%l%C%I(B
MS07-002$B!N6[5^!O!'(BMicrosoft Excel $B$N@H (hotfix.jp)
excel$B$,I=<($5$l$J$$(B ($BEz$($F$M$C$H(B)
1$B7n$N7nNc%Q%C%A!V(BMS07-002$B!W$r(BExcel 2000$B$KE,MQ$7$?>l9g$KIT6q9g$,H/@8(B (Internet Watch, 2007.01.10)

$B!!(BExcel 2000 $B$@$1$,!V?<9oEY(B: $B6[5^!W$@$H$5$l$F$$$k$N$K!"$=$N(B Excel 2000 $B$GIT6q9g$,H/@8$9$k$H$O!D!D!#(B $B
$B!!(BExcel 2000 $BMQ$N(B patch $B$O%"%s%$%s%9%H!<%k$G$-$J$$$h$&$G$9!#(B MS07-002 $B$h$j(B:

$B:o=|$K4X$9$k>pJs(B
$B$3$N99?7%W%m%0%i%`$N%$%s%9%H!<%k8e!":o=|$O$G$-$^$;$s!#99?7%W%m%0%i%`$N%$%s%9%H!<%kA0$N>uBV$KLa$9$K$O!"%"%W%j%1!<%7%g%s$r:o=|$7!"$=$l$r85$N(B CD-ROM $B$+$i:FEY%$%s%9%H!<%k$9$kI,MW$,$"$j$^$9!#(B

$B!!(Bpatch $B$rE,MQ$7$F$$$J$$(B Excel 2000 $B$N(B EXCEL.EXE $B$r>e=q$-$9$k$H2sI|$G$-$^$7$?(B [memo:9199] [memo:9200]$B!#85$N%U%!%$%k$O(B rename $B$7$F;D$7$F$*$$$?J}$,$$$$$G$7$g$&$1$I!#(B

2007.01.11 $BDI5-(B:

$B!!$h$&$d$/=P$^$7$?$+(B: MS07-002 $BE,MQ8e$NIT6q9g(B (Excel 2000) ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2007.01.11)

2007.01.12 $BDI5-(B:

$B!!(BKB $B=P$^$7$?(B: Excel 2000 $B$O!"5-:\$5$l$?%;%-%e%j%F%#99?7%W%m%0%i%`(B 925524 $B$N%;%-%e%j%F%#>pJs(B MS07-002 $B$G%$%s%9%H!<%k8e!"$$$/$D$+$N%U%!%$%k$r3+$1$^$;$s(B (Microsoft)

$B$3$NLdBj$O(B Excel 2000 $B$,pJs$r=hM}$9$kJ}K!$,860x$GH/@8$7$^$9!#(B

$B!!>e5-$O<+F0K]Lu$K$h$k$b$N!#(B$B1Q8lHG(B$B$G$O$3$&$$$&J8>O(B:

This problem occurs because of the way in which Excel 2000 processes the phonetic information that is embedded in files that are created by using Excel 2000 in the Korean, Chinese, or Japanese executable mode.

$B!!2sHr:v$H$7$F$O(B Excel Viewer 2003 $B$d(B Excel 2002 / 2003 $B$NMxMQ$,5s$2$i$l$F$$$k!#(B

2007.01.19 $BDI5-(B:

$B!!(BExcel 2000 $BMQ$N?7(B patch $B=P$^$7$?(B: MS07-002 $B$N:F%j%j!<%9(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2007.01.19)$B!#(B $B
2007.02.03 $BDI5-(B:

$B!!(BMS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC (milw0rm)

$B"#(B 2007.01.09

$B!U(B [AML 11250] Fw: [TUP-Bulletin] $BB.Js(B651$B9f!!%j%P!<%Y%s%I$NF|5-(B 12$B7n(B29$BF|!!:G0-$NG/$@$C$?(B2006$BG/!!(B070101 $B!"(B [AML 11251] Fw: [TUP-Bulletin] $BB.Js(B652$B9f!!%j%P!<%Y%s%I$NF|5-(B 12$B7n(B31$BF|!!%5%C%@!<%`!&%U%;%$%s=h7:!!(B070101

$B!U(B $B%A%'%A%'%s$G$N<:m)!&M62}!&9iLd!&5TBT$KH?BP$9$kMU=q$r=P$=$&!*(B ($B%P%$%J%U<+M3DL?.(B, 1/7)$B!#%"%`%M%9%F%#!&%$%s%?!<%J%7%g%J%k$NMU=q%"%/%7%g%s$NOC!#(B2007.01.29 $B$^$G!#(B

$B!U(B $B%A%'%A%'%s%K%e!<%9(B Vol.06 No.29 2006.12.31 ($B%A%'%A%'%s%K%e!<%9(B)$B!#(B $B%R%e!<%^%s!&%i%$%D!&%&%)%C%A$N4J0WJs9p=q(B $B!V(B$B%A%'%A%'%s6&OB9q!'$O$S$3$k9iLd(B$B!W(B $B$J$I!#(B

$B!U(B Cabos $B$H$$$&(B Gnutella $B%U%!%$%k6&M-%W%m%0%i%`$,$"$k$N$@$=$&$G!#(B $B#A#i#s#o#r#a$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!U(B nifty$B$K56Au$7$?0-0U$N$"$k%5%$%H$,EP>l(B $B$7$?OC$K4XO"$7$F!"(B$B%j%M!<%8%e;qNA<<(B$B$5$s$+$i>pJs$r$$$?$@$-$^$7$?(B ($B$"$j$,$H$&$4$6$$$^$9(B)

homepage3-nifty.com$B0J30$K$b!"$^$@8=Lr$N$J$s$A$c$C$F%I%a%$%s$N$&$AHf3SE*?7$7$$$b$N$K$O
http://www.livedoor1.com/blogk2/ (Livedoor$B56Au(B)
http://www.game-oekakibbs.com/bbs/ ($B$*3($+$-(BBBS$B56Au!K(B
http://www.games-nifty.com/links/ (Nifty$B56Au(B)
http://www.watcheimpress.com/links/ ($B%$%s%W%l%956Au(B)

$B%$%s%W%l%9$b$I$-$J$I$O!"%5%V%I%a%$%s$K(Bforest$B$H$+(Binternet$B$J$I$HIU$1$i$l$?$i!"0z$C$+$+$k?M$bB?$=$&$J5$$,$7$^$9!#(B

$BF1MM$N%H%i%C%W%5%$%H$N%I%a%$%s$r0lMw$K$7$?$N$,2<5-$N%Z!<%8$G$9!#EPO?>pJs$+$iF10l%/%i%C%+!<$K$h$kEPO?%I%a%$%s$H;W$o$l$k$b$N$,$[$H$s$I$G!"$K$b$+$+$o$i$:F|!9A}$(B3$1$F$$$k>u67$G$9!#(B

http://lineage.nyx.bne.jp/misc/security/?id=url-domain

$B$3$l$H$OJL$NOC$G!"@57nAa!9(BNPO$BK!?M!VF|K\<+Hq=PHG%M%C%H%o!<%/!W$N%5%$%H$,2~cb$5$l!"%H%C%W%Z!<%8$K(Biframe$B$G%H%i%C%W$,Kd$a9~$^$l$^$7$?!#$HF1;~$K!"%5%$%HFb$K$b%@%&%s%m!<%IMQ$N%9%/%j%W%H$d%&%#%k%9K\BN$,CV$+$l$^$7$?!#(B

http://www.jswork.jp/
http://www.jswork.jp/img/riben.htm
http://www.jswork.jp/img/t1.exe
http://www.jswork.jp/img/msn.exe

$B%5%$%H4IM}e5-(BURL$B$rE:$($F%a!<%kO"Mm$7$?$H$3$m!"JV?.$O$J$$$b$N$NMbF|$K$O%H%C%W%Z!<%8Fb$N(Biframe$B$H!"%9%/%j%W%H%Z!<%8$@$1$O:o=|$5$l$?$N$G$9$,!"$J$<$+%&%#%k%9K\BN$N%U%!%$%k$O8=:_$bJ|CV$5$l$F$$$^$9!#%a!<%k$NJV?.$,$J$$$N$O$H$b$+$/!"%5%$%HMxMQl=j$KCV$-B3$1$k?@7P$,M}2r$G$-$^$;$s!#(B

$B%5%$%H4IM}
$B>e5-$N%&%#%k%9$N$&$A(Bmsn.exe$B$O(BMSN$B%a%C%;%s%8%c!<$N%"%+%&%s%H>pJs$rEp$_$^$9!#%2!<%`%f!<%60J30$N?M$b!J$*$=$i$/$OF'$_Bf$H$7$F!KA@$o$l$k$h$&$K$J$C$F$-$^$7$?!#(B

$B!U(B Plash$B!#(B Linux $BMQ$N(B sandbox $B$@$=$&$G$9!#(B

$B!U(B $B%1%?%_%s!J%1%?%i!<%k!K$NKcLt;XDj$r ($BFAEgBg3X(B)$B!#(B2007.01.01 $B$+$iKcLt07$$$J$N$@$=$&$G$9!#(B $B$J$<$+N6Bg$G$O!"$3$l$K4X$9$kDLCN$,(B$B:#G/$K$J$C$F$+$i(B$BN.DL$7$F$$$k$h$&$G!D!D$b$7;}$C$F$?$i(T_T)

$B!U(B $B8D?M>pJsJ]8nK!!'AmL3>J$N1?MQ;Q@*!!O3$($$;v6H ($BKhF|(B, 1/8)$B!#C4Ev
$B!U(B $B;R6!%b%G%k!'6H0w(B ($BKhF|(B, 1/9)$B!#$R$I$$$M!#(B

$B!U(B Hyperlinks do not work in Outlook Express after you upgrade to Internet Explorer 7 (Microsoft)$B!#(BIE 7 $B$K$9$k$H!"@_Dj$,>C$($A$c$&$3$H$,$"$k$C$F$3$H$J$s$G$9$+$M$(!#(B

$B!U(B $B%Y%i%k!<%7!'%m%7%";:@PL}$N2$=#8~$16!5kDd;_(B ($BKhF|(B, 1/8)$B!"(B $B%m%7%"!"@PL}6!5k:o8:$rG'$a$k!!Hs$O%Y%i%k!<%7$H (asahi.com, 1/9)

$B!U(B $B@n:jIB!'45IJz$(CfG/4|7^$($k!!H/8+#4#0G/!":#$J$*860xITL@(B ($BKhF|(B, 1/9)

$B!U(B $BD;%$%s%U%k%(%s%6!'#1#0J,$G?GCG!!Bg:e$N8&5f=j$,?7K!3+H/(B ($BKhF|(B, 1/9)

$B!U(B $BF|K\$N%?%s%+!h0wL5;v!!%[%k%`%:3$6.(B (asahi.com, 1/9)$B!#69$$$HI>H=$N>l=j$G$9$M!#(B

$B86@x$H@\?(!!8=>l!"1}MhB?$$Fq=j!!@n:j5%A%$,>pJs<}=8(B (asahi.com, 1/9)
$B%m%5%s%<%k%95i86;RNO@x?e4O(B ($B%&%#%-%Z%G%#%"(B)$B!#(B$B%K%e!<%]!<%H!&%K%e!<%:(B$B$O!V%U%i%$%H(B II$B!W$KB0$9$k4O$G$9$+!#(B
$BDL9RA%$N ($B0K@*OQ3$>e8rDL%;%s%?!<(B)$B!"(B $B%?%s%+!<(B ($BBg:eOQ3$>e8rDL%;%s%?!<(B)$B!#%?%s%+!<:G>e@n$N
$B!U(B TeraStationPRO$B!V(BTS-HTGL/R5$B!W%7%j!<%:$G(BRAID10$B$r$4;HMQ$N3'MM$X(B (BUFFALO, 1/5)$B!#%U%!!<%`%&%'%"%P!<%8%g%s(B 1.00 $B$OIe$C$F$$$k$h$&$G$9!#(B1.02 $B$X99?7$7$^$7$g$&!#(B

$B!U(B $BKI1R>J!&<+1RBb(B$B$@$=$&$G$9!#(B

$B!U(B $B3$B1BP:v<<$O$G$-$?$1$l$I(B $B$N7o$K$D$$$F!"F?L>4uK>$5$s$+$i(B ($B$"$j$,$H$&$4$5$$$^$9(B)

$B!V$H$+$/$N1=!W$H$O(B $B!V%$%s%I%M%7%"3$73$,3$B1$K4XM?!W(B $B$H$$$&1=$@$H;W$$$^$9!#(B $B0lIt$N3$B1$N@5BN$O%$%s%I%M%7%"3$73$@$H$$$&1=$9$i$"$j$^$9!#(B

$B!!$"$!!"$J$k$[$I!D!D!#!V%$%s%I%M%7%"3$73$K$_$+$8$aNA$rJ'$C$F$*$1!W$H$$$&$3$H$G$9$+!#4XO"(B:

$B%^%i%C%+$N3$B1!"$=$N@5BN$O(B (JANJAN, 2006.02.24)
$B!V3$B1!W%S%8%M%9$N?HBe6bAj>l(B (YomiuriWeekly, 2005.04.03)

$B!U(B 0trace - traceroute on established connections$B!#$X$'!#(B

$B!U(B $B!T(BESPIO!$B!U(B $B8x0BD4::41!&B<>e7=;R$N9XF~%^%s%7%g%s$K4X$9$k>pJsDs6!(B (ESPIO!, 1/9)

$B!U(B $B;3:jBs;a!'KL5~$X=PH/!!#9F|$KKLD+A/F~$j$+(B ($BKhF|(B, 1/8)$B!#(B $B!T(BESPIO!$B!U(B $B0BG\ (ESPIO!, 12/29) $B$NOC(B? $B!T(B ESPIO! $B!U;3:jBsK,D+!=!V7D1~Bg3X$NB46H@8$OF|K\8l$,$G$-$J$$!W=EB.@t=c0lO:I>(B (ESPIO!, 1/9) $B$b;2>H!#(B

$B!U(B $B%0!<%0%k3WL?$N>W7b(B $B!A$"$J$?$N?M@8$r!H8!:w!I$,JQ$($k!A(B (NHK $B%9%Z%7%c%k(B)$B!#(B1/21$B!#(B

$B"#(B spam dies$B$H$O$$$&$1$l$I(Btemporaryinbox.com$B$N%5!<%S%9$G>pJsO3$lO3$l$H;W$&7o(B
($B%$%s%U%i4IM}

$B!!$J$s$@$+$\$m$\$m$N$h$&$G$9$M!D!D!#$O$J$:$-$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B"#(B $BDI5-(B

Adobe Acrobat Reader Plugin - Multiple Vulnerabilities

$B!!4XO"(B:

$B%"%I%S(B Acrobat Reader Plugin $B$N(BPDF $B%U%!%$%k(B $B%/%m%9%5%$%H$H%3!<%I$N (ISSKK)$B!#!VL$Dj!W$P$+$j$,%:%i%j$HJB$V!"$H$$$&$N$,LdBj$N?<9o$5$rI=$o$7$F$$$k$N$+!#(B

$B"#(B $B$$$m$$$m(B (2007.01.09)
(various)

[SA23647] MediaWiki AJAX Unspecified Cross-Site Scripting$B!#(B1.6.9 / 1.7.2 / 1.8.3 $B$GD>$C$F$$$k$h$&$G$9!#(B

[SA23655] Internet Explorer Memory Corruption Weakness$B!#(B DoS $B$M$?!#(B

[SA23529] Linux Kernel Unspecified "init_timer()" Security Issue$B!#(B Linux 2.4.x $BOC!#(B2.4.34 $B$G(B fix $B$5$l$F$$$k$=$&$J!#(B

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access

VMSA-2007-0001: VMware ESX server security updates$B!#(B patch $B$,$"$k$=$&$G$9!#(B CVE-2006-2937 CVE-2006-2940 CVE-2006-3589 CVE-2006-3738 CVE-2006-4339 CVE-2006-4343 CVE-2006-4980

$B"#(B 2007.01.08

$B!U(B ie7$B$G$0$0$k$H(I%%%(B (Snow Flake, 1/5)$B!#(BSnow Flake $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B $B$0$0$C$F$_$k$H(B True Lies (Security and Secure IT, 2006.06.30) $B$H$$$&%Z!<%8$,$_$D$+$k$N$G!":rF|:#F|$O$8$^$C$?OC$G$O$J$$$N$+$7$i!#(Bgeektools $B$G(B whois $B$9$k$H(B

Name servers:
ns0.etypemedia.co.uk
ns0.j15.co.uk
ns0.cerbernet.co.uk

$B$H=P$F$/$k$N$@$1$I!"(Bns0.j15.co.uk $B$KLd$$$"$o$;$?>l9g$K$@$1(B www.e-typedesign.co.uk. 3600 IN CNAME www.microsoft.com. $B$H8@$o$l$k$_$?$$!#(Bns0.etypemedia.co.uk $B$H(B ns0.cerbernet.co.uk $B$G$O$=$&$O$J$i$J$$!#(B

$B!!$H$j$"$($:!"8=:_$O(B MS $B$J%I%-%e%a%s%H$rFI$a$?$j$O$7$J$/$J$C$F$$$k$_$?$$$G$9$,!D!D!#(B

$B!U(B 2007$BG/(B01$B7nEY(B LILO Monthly Seminar (LILO)$B!#(B2007.01.13$B!"J<8K8)?@8M;T!"(B500 $B1_DxEY!#(B

$B!U(B $B!T(BESPIO!$B!U(B $B8x0BD4::D#$,Cf9q!&9q2H0BA4It$HD+A/H>Eg>p@*$K$D$$$F0U8+8r49!JFbMF$OKLD+A/$KE{H4$1!)!K(B (1/7)

$B!U(B $B!T(BESPIO!$B!U(B $B>pJs5!4X?7@_$r$a$0$k0EF.!=!VBg?99=A[!WDY$7$r2h:v$9$k7Y;!D#(B (1/5)

$B!U(B $B%G%9%/%^%C%H(B($B936];EMM(B)$B$40&MQ$N3'MM$X(B ($B%3%/%h(B)

$BJ@I$9$k2DG=@-$,$"$k$3$H$,H=L@CW$7$^$7$?!#(B

$B!!L5=~8r49$r9T$C$F$$$k$=$&$G$9!#IJHV$,3:Ev$9$k>l9g$O8r49$7$F$b$i$$$^$7$g$&!#$H$s$H$+$$$b$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!U(B $B%a!<%kAw (IBM, 2006.12.26)$B!#(B Lotus Notes Client 6.x / 7.x $B$K$*$1$k%a!<%k$N08@h$N=hM}$K7g4Y$,$"$j!"(B $B8mAw?.$,H/@8$9$k>l9g$,$"$k$=$&$@!#$O$J$:$-$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!!2sHr$9$k$K$O!"(BLotus Domino Designer $B$r;H$C$F%a!<%k%F%s%W%l!<%H$rJQ99$7$J$1$l$P$J$i$J$$$=$&$@!#(B $B$O$J$:$-$s$5$s$N(B blog $B$b;2>H$5$l$?$$!#(B

$B"#(B $B$$$m$$$m(B (2007.01.08)
(various)

WordPress $BOC(B

WordPress CSRF Protection XSS Vulnerability$B!#(B CVE-2007-0106
WordPress Trackback Charset Decoding SQL Injection Vulnerability$B!#(BUTF-7 $B$G$9$+!#(B CVE-2007-0107

WordPress 2.0.6 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B

Opera $BOC(B

[VulnWatch] iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability$B!#(B CVE-2007-0126
[VulnWatch] iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability$B!#(B CVE-2007-0127

Opera 9.10 $B$GD>$C$F$$$k$=$&$G$9!#(B

fetchmail $BOC(B

[VulnWatch] fetchmail security announcement 2006-02 (CVE-2006-5867)
[VulnWatch] fetchmail security announcement 2006-03 (CVE-2006-5974)

fetchmail 6.3.6 $B$GD>$C$F$$$k$=$&$G$9!#(B

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server

[VulnWatch] iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability$B!#(B Kaspersky $B<+?H$K$D$$$F$O(B 2007.01.02 $B$N<+F099?7$G=$@5$5$l$F$$$k$=$&$@!#(B Kaspersky $B%(%s%8%s$rEc:\$7$F$$$kB>$N%"%s%A%&%$%k%9%=%U%H$K$D$$$F$OITL@!#(B CVE-2007-0125

$B"#(B 2007.01.07

$B!U(B $BBfOQCO?L$N1F6A$G(B1$BK|$N%I%a%$%sL>>C<:(B (ITmedia / $B%m%$%?!<(B, 1/5)$B!#$3$&$$$&$3$H$b$"$k$N$G!"%I%a%$%s$N99?7$O$*Aa$a$K!#(B

$B!U(B YouTube$B$NF|K\%S%8%M%9E83+!"8"Mx (ITmedia, 1/5)

$B!U(B $B@D6uJ88K!"Cx:n8"J]8n4|4V1dD9$KH?BP$N=pL>8F$S3]$1!!9q2q$KDs=P$X(B (ITmedia, 1/5)

$B=pL>$O%M%C%H$G8x3+$7$F$$$kMQ;f$K9T$$!"@D6uJ88K$NO"Mm@h!JEl5~ET?7=I6h!K$KAwIU$9$k!#(B4$B7n(B30$BF|$r(B1$B1!5DD908$F$KDs=P$9$kM=Dj!#(B

$B!!(B$BCx:n8"J]8n4|4V$N1dD9$r(B $B9T$o$J$$$h$&5a$a$k@A4j=pL>(B ($B@D6uJ88K(B) $B$r;2>H!#(B

$B!U(B $B=;4p%M%C%H9b:[H=7h8e$NAmL3>J!V=;L14pK\BfD"%M%C%H%o!<%/%7%9%F%`D4::0Q0w2q2q5DMW;]!W(B ($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 1/6)

$B!U(B nifty$B$K56Au$7$?0-0U$N$"$k%5%$%H$,EP>l(B (slashdot.jp, 1/3)$B!#$3$N%5%$%H!"$^$@$"$k$s$G$9$M!#(B $B$5$-$[$I%"%/%;%9$7$?$i!"(B http://www.homepage3-nifty.com/online/ svch.exe $B$r(B get $B$9$k$h$&$K$J$C$F$^$7$?!#(BSophos $B$O(B Troj/Maran-Gen $B$@$H8@$C$F$^$7$?!#(B

$B!U(B $B%K%;%b%NKPLG$K#2#32/1_!!M=;;0F$G@/I\G\A}(B (asahi.com, 1/7)

$B!U(B $BF/$/=w@-$NA49q%;%s%?!R2p(B ($BKhF|(B, 1/7)

$B!U(B $BF|6=!"6H@S0-2=$r7|G0!!;_$^$i$L8\5RN%$l(B (asahi.com, 1/6)

$B!U(B $B%j%S%"$GL}ED3+H/K\3J2=!!?7$?$K#19[6hMn;%!!9q:]@PL}3+H/$H;00f@PL}3+H/(B (Yahoo / $B;:7P(B, 2006.12.26)$B!"(B $B%j%S%"L}ED!'F|K\$N#2L}ED!" ($BKhF|(B, 2006.12.26)

$B!U(B $BKLJ}NNEZ!'2r7h:v$K!VLL@QJ,3d!W0F!!F|O*C5$j9g$$$+(B ($BKhF|(B, 1/3)

$B!U(B $B%9%?!<%P%C%/%9!'0-6LL}$N;HMQCf;_!!#3F|$+$iA4JFE9J^$G(B ($BKhF|(B, 1/3)

$B!U(B $B86GzF|5-!'5lM}8&8&5fA03+H/CGG0$N5-O?(B ($BKhF|(B, 1/6)

$B!U(B $BBg4Z9R6u5!$,M6F3O)$K8mCeN&!";v8ND4$,D4::!!=)ED6u9A(B (asahi.com, 1/6)$B!"(B $B!V$R$H$D4V0c$($PBg;4;v!W!!8mCeN&$G=)ED6u9A4X78 (asahi.com, 1/6)$B!"(B $BA`=D$O5!D9!"Bg4Z9R6u$N8mCeN&!!=)ED6u9A(B (asahi.com, 1/7)

$BF16u9A$K$OEEGH$G9R6u5!$rM6F3$9$kAuCV$,3jAvO)$NJRJ}$K$7$+$J$/!":#2s$O$J$$J}$+$i$NCeN&$@$C$?!#F16u9A!&9R6uO)4F;k%l!<%@!<;vL3=j$K$h$k$H!"4I@)41$OD>A0$K5$$E$$$?$,!"CeN&@#A0$@$C$?$?$a$=$N$^$^CeN&$5$;$?$H$$$&!#(B

$B"#(B $BDI5-(B

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

$B!!(BMonth of Apple Bugs - Day 3 (Landon Fuller, 2007.01.04) $B$H(B Month of Apple Bugs - Day 4 (Landon Fuller, 2007.01.05) $B$K(B patch $B$,$"$kLOMM!#(B $B$?$^$A$c$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

Apple QuickTime RTSP URL Handler Vulnerability

$B!!(BMonth of Apple Bugs - Day 1 (Landon Fuller, 2007.01.02) $B$K(B patch $B$,$"$kLOMM!#(B $B$?$^$A$c$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B"#(B 2007.01.06

$B!U(B $B3$B1BP:v<<$O$G$-$?$1$l$I(B (JANJAN, 1/5)

$B8=>l3$0h$+$iMZ$+1s$/N%$l$?F|K\$K3$B1BP:v<<$r@_CV$7$F$b!"3$B1$OI]$/$b2?$b$J$$!#$=$l$h$j$b!"$H$+$/$N1=$,@d$($J$$%$%s%I%M%7%"3$73$K4sIU$7$?J}$,!"3$B1KI;_$K$O8z2LE*$@$H;W$&$N$@$,!#(B

$B!!$=$&$$$&$3$H$b$d$C$F$^$9$h!#(B

$B3$B1BP:v$G=d;kDz6!M?$X!!@/I\!"%$%s%I%M%7%"$K#O#D#A$G(B (asahi.com, 2005.03.16) $B"+(B $B5-;v>C$($F$^$9(B
$B8x<((B (JICA, 2005.04.06)$B!#(B $B%$%s%I%M%7%"(B: $B3$B1!"3$>e%F%m5Z$SJ<4o3H;6KI;_$N$?$a$N=d;kA%Dz6!M?7W2hM=HwD4::!JA%Dz7zB$7W2h!K(B
$B@/:vI>2AK!$K4p$E$/;vA0I>2A=q(B: $B!V3$B1!"3$>e%F%m5Z$SJ<4o3H;6$NKI;_$N$?$a$N=d;kA%7zB$7W2h!W(B ($B30L3>J(B, 2006.05.26)
$B9q2H7Y;!3$>e7Y;!6I$G;HMQ$9$k=d;kA%(B3$B@I!JA%GuA4D9Ls(B27m$B!"B.NO!'Ls(B30$B%N%C%H!"9RB35wN%!'Ls(B600$B3$N$!K$r6!M?$7!"%Y%i%o%s4pCO5Z$S%?%s%8%e%s%P%D4pCO!"%8%c%+%k%?4pCO$KG[Hw$9$k$b$N!#(B

$BBh#1#6#42s9q2q!!308rKI1R0Q0w2q!!Bh#2#29f(B $BJ?@.==H,G/O;7n==;0F|!J2PMKF|!K(B ($B;25D1!(B, 2006.06.13)$B!#(B $BIp4oM"=P;086B'$NNc30$O$I$N$h$&$KG'$a$i$l$k$N$+(B ($B@n:jE/$N%V%m%0(B, 2006.07.31) $B$r;2>H!#(B
ODA$B$HIp4oM"=P(B3$B86B'(B (ODA$B%8%c!<%J%j%9%H$N$D$V$d$-(B, 2006.07.28)
$BBP%$%s%I%M%7%"1_%m%s%0%j%9%H(B ($B30L3>J(B)$B!#!V%$%s%I%M%7%"=d;kDz2~NI;v6H!W$H$$$&$N$,$"$j$^$9$M!#(B

$B!!4XO"(B:

$B3$>eJ]0BD#$K$h$k3$B1BP:v$N99$J$k6/NO$J?d?J$K$D$$$F(B ($B3$>eJ]0BD#(B, 2006.12.21)
$B3$>eJ]0BD#$G$O!"$3$l$^$G=EE@2]Bj$N0l$D$H$7$F1T0U
$B3$>eJ]0BD#44ItL>Jm!!!JJ?@.(B19$BG/(B 1$B7n(B 1$BF|8=:_!K(B ($B3$>eJ]0BD#(B, 2007.01.01)$B!#(B $B3$B1BP:v<
$B!!(B$B$3$NOC$N$D$E$-(B: 1/9

$B!U(B $B?M$N6/$5$H (JANJAN, 1/5)

$B!U(B $B%+%j%V3$1h4_!'56!X%(%3%D!<%j%:%`!Y$,L@$i$+$K(B (JANJAN, 1/5)

$B!U(B 10 $BK|1_$r1[$($k8=6b$N$*?69~$_$K$D$$$F(B ($BA46d6((B)$B!#8=6b$,BP>]$J$s$G$9$M!#(B $B:#HL$NK\?M3NG'K!;\9TNa$N2~@5$K$D$$$F(B ($B6bM;D#(B)$B!#K\?M3NG'K!;\9TNa!&;\9T5,B'$,2~@5$5$l$?$N$G$9$M!#(B

$B!U(B Jem$B$N%;%-%e%j%F%#DI$C$+$1F|5-!\&A(B: $B%&%#%k%9%P%9%?!<(B2007 ($B$^$C$A$c$@$$$U$/$NF|5-(B, 1/4)$B!#%&%$%k%9%P%9%?!<(B 2007 $B$C$F!"$^$C$A$c$5$s$,$"$-$i$a$k$[$ICY$$$N$G$9$+!D!D!#$^$!!"26E*4pK\F0:n$O!V%&%$%k%9%P%9%?!<$OH>G/$O?2$+$;$m!W$J$N$GL5LdBj$J$N$G$9$,!D!D!#(B 15.3 $BBT$A$J$s$G$9$+$M!#(B

$B!U(B Cisco$B!"%2!<%H%&%'%$%;%-%e%j%F%#4k6H$N(BIronPort$B$rGc<}(B (ITmedia, 1/5)$B!#Gc$o$l$A$c$$$^$7$?$+!D!D!#(B

$B!U(B $B4ZH>EgM-;v$J$i!VKLFqL1#1#5K|?M$,F|K\N.F~!W!D4Z9q:_=;JFF|L14V?ME1<}7W2h$b(B ($BCf1{F|Js(B, 1/6)$B!"(B $B4ZH>EgM-;v!'!VKLD+A/FqL1!":GBg(B15$BK|?M$,F|K\$KN.F~!W(B ($BD+A/F|Js(B, 1/6)

$B!U(B $B%@%$%(%C%H!'K\Ev!)!V#2=54V$G#2%-%mDxEY$d$;$i$l$k!W!!2aBgI>2A$O4m81(B ($BKhF|(B, 1/6)

$B!U(B $B@dHG=q@R$r%M%C%H$G1\Mw!!@/I\!"Cx:n8"K!2~@50FDs=P$X(B (slashdot.jp, 1/6)

$B"#(B $B$$$m$$$m(B (2007.01.06)
(various)

MOAB

MOAB-02-01-2007: VLC Media Player udp:// Format String Vulnerability$B!#(B VLC 0.8.6a $B$GD>$C$F$$$k$=$&$G$9(B:
MOAB-04-01-2007: iLife iPhoto Photocast XML title Format String Vulnerability$B!#(B remote $B$+$iG$0U$N%3!<%I$rMonth of Apple Bugs - Day 4 (Landon Fuller, 2007.01.04) $B$K(B patch $B$,$"$kLOMM!#(B
MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability$B!#(Blocal user $B$,(B root $B8"8B$rMonth of Apple Bugs - Day 5 (Landon Fuller, 2007.01.05) $B$K(B workaround $B$,<($5$l$F$$$k!#(B

$B$?$^$A$c$s$5$s(B fix $B>pJs$"$j$,$H$&$4$6$$$^$9!#(B http://landonf.bikemonkey.org/code/macosx/ $B$OMWCmL\$N$h$&$G$9!#(B

NtRaiseHardError Csrss.exe memory Disclosure exploit$B!#(B Windows CSRSS HardError Message Box Vulnerability $B$H$O0c$&OC$J$N$@$=$&$@!#(B CVE-2006-6797

[Full-disclosure] WordPress Persistent XSS$B!#(B WordPress 2.0.6 $B$GD>$C$F$$$kLOMM!#(B CVE-2006-6808

CVE-2006-6827$B!#(BFlash8b.ocx DoS $BOC!#(B

CVE-2006-6847$B!#(B RealPlayer 10.5 $B$N(B ierpplug.dll ActiveX $B%3%s%H%m!<%k(B DoS $BOC!#(B

[Full-disclosure] Inforamtion Discloser Vulnerabilities in "phpMyAdmin" $B!#(B phpMyAdmin 2.9.1.1 $B$X$N(B patch $B>pJs$"$j!#(B CVE-2007-0095

$B"#(B MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability
(MOAB, 2007.01.03)

$B!!(BQuicktime 7.1.3 $B$K7g4Y!#(B MySpace$B$G46@w$r(B $B9-$2$k!H(BQuickTime$B%S%G%*!&%o!<%`!I!$L\E*$O%U%#%C%7%s%0(B $B$N7o$G0lLvM-L>$K$J$C$?(B HREFTrack $B$O!"(BXSS $B$@$1$G$J$/(B Cross-zone scripting $B$b2DG=$@!"$H$$$&OC!#(B CVE-2007-0059

$B!!=$@5%W%m%0%i%`$O:#$N$H$3$mB8:_$7$J$$!#;XE&)$7$F$$$k!#(B $B$=$l$K$7$F$b(B HREFTrack $B$G$9$,!"(BMySpace.com $BFbIt$G$@$1(B QuickTime $B$N(B patch $B$,G[I[$5$l$F$$$?$N$G$9$+!D!D!#(B

2007.01.07 $BDI5-(B:

$B!!(BMonth of Apple Bugs - Day 3 (Landon Fuller, 2007.01.04) $B$H(B Month of Apple Bugs - Day 4 (Landon Fuller, 2007.01.05) $B$K(B patch $B$,$"$kLOMM!#(B $B$?$^$A$c$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B"#(B Apple QuickTime RTSP URL Handler Vulnerability
(SANS ISC, 2007.01.03)

$B!!(BQuickTime 7.1.3 $B$K7g4Y!#(BRTSP $B%W%m%H%3%k$N(B URL $B%O%s%I%i$K7g4Y$,$"$j!"(Bbuffer overflow $B$,H/@8!"96N,(B rtsp:// URL $B$K$h$C$FG$0U$N%3!<%I$rthe Month of Apple Bugs $B$N1I$($"$k(B 1 $B8DL\!#(B CVE-2007-0015

$B!!=$@5%W%m%0%i%`$O:#$N$H$3$mB8:_$7$J$$!#(BQuickTime $B$G(B rtsp:// URL $B$r=hM}$7$J$$$h$&@_Dj$9$l$P2sHr$G$-$k!#(B

2007.01.07 $BDI5-(B:

$B!!(BMonth of Apple Bugs - Day 1 (Landon Fuller, 2007.01.02) $B$K(B patch $B$,$"$kLOMM!#(B $B$?$^$A$c$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

2007.01.24 $BDI5-(B:

$B!!(Bpatch $B$,=P$^$7$?(B: Security Update 2007-001 $B$K$D$$$F(B (Apple)$B!#(B $BE,MQ$7$F$b(B QuickTime $B$N%P!<%8%g%sI=<($OJQ$o$i$J$$$_$?$$$G$9$M!#(B

2007.01.25 $BDI5-(B:

$B!!(BWindows $B$G(B Apple Software Update $B$r;H$C$F(B Security Update 2007-001 $B$rE,MQ$9$k$H!"0J2<$,99?7$5$l$k$_$?$$!#(B

C:\Program Files\QuickTime\QuickTimePlayer.exe
C:\Program Files\QuickTime\QTSystem\QuickTime.qts
C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.qtx

$B!!99?78e$N(B QuickTimePlayer.exe $B$N(B digital signature $B$O$3$s$J46$8(B:

MD5: 3C4BB567B36ED1F671FAF6DC41472D77
SHA1: C8F7D0071599EAAD45A01A69802B79E6C76201F9

$B!!(BQuickTimePlayer $B$N%P!<%8%g%s<+BN$O(B 7.1.3.90 $B$N$^$^$@$C$?!#(B

$B"#(B OpenOffice.org V2.0$B$K=EBg$J%;%-%e%j%F%#%[!<%k!"$@$,!D(B
(slashdot.jp, 2007.01.05)

$B!!(B[SA23612] OpenOffice WMF/EMF Processing Buffer Overflow Vulnerabilities $B$NOC!#(BOpenOffice.org 2.1 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B $B%^%k%A%G%#%9%W%l%$$KBP1~$7$?!V(BOpenOffice.org$B!W(Bv2.1 $BF|K\8lHG$,8x3+(B ($BAk$NEN(B) $B$@$=$&$J$N$G%"%C%W%G!<%H$7$^$;$&!#(B

$B"#(B Adobe Acrobat Reader Plugin - Multiple Vulnerabilities
(Stefano Di Paola, 2007.01.04)

$B!!(BAdobe Reader / Acrobat 7.x $B0JA0$N%W%i%0%$%s$KJ#?t$N7g4Y$,$"$k$H$$$&OC!#(B

$B%f%K%P!<%5%k(B Session Riding (CSRF)$B!#(B $BBP>](B: Firefox / IE 6 / Opera + Adobe Reader / Acrobat $B%W%i%0%$%s(B

http://example.com/file.pdf#FDF=http://example.jp/index.html?param=... $B$X$N%j%s%/$r$?$I$k$H!"%f!<%6$X$NLd$$$"$o$;$J$7$G(B example.jp $B$K(B param=... $B$,Aw$i$l$F$7$^$$!"(BCSRF $B967b$KMxMQ$G$-$kLOMM!#(BFDF (Forms Data Format) $B$NB>$K(B XML= $B$d(B XFDF= $B$G$bF1MM$K$J$k$=$&$@!#(B CVE-2007-0044

$B%f%K%P!<%5%k(B XSS$B!#(B $BBP>](B: Firefox + Adobe Reader / Acrobat $B%W%i%0%$%s(B

http://example.com/file.pdf#FDF=javascript:alert('Test Alert') $B$X$N%j%s%/$r$?$I$k$H!"(BFirefox $B>e$G(B JavaScript $B$,

Universal XSS with PDF files: highly dangerous (bugtraq)
[WEB SECURITY] Universal XSS with PDF files: highly dangerous ($BMU$C$QF|5-(B)
Universal PDF XSS After Party (navigation)
[seasurfers:0418] Re: PD$B#F$G(BXSS
CVE-2007-0045 CVE-2007-0047

# $B$N$&$7$m$O$J$s$G$b$$$$$_$?$$!#(B

$B%j%b!<%H%3!<%I$N](B: Firefox + Adobe Reader / Acrobat $B%W%i%0%$%s(B

http://example.com/file.pdf#FDF=javascript:document.write('jjjjj...'); $B$X$N%j%s%/$r$?$I$k$H(B Firefox $BFbIt$G$N%a%b%jGK2u$rM6H/$G$-!"$3$l$r;H$&$HG$0U$N%3!<%I$rCVE-2007-0046

DoS$B!#(B $BBP>](B: IE 6 + Adobe Reader / Acrobat $B%W%i%0%$%s(B

http://example.com/file.pdf#####...(More '#') $B$X$N%j%s%/$r$?$I$k$H(B IE 6 $B$,(B DoS $B$K$J$kLOMM!#(B CVE-2007-0048

$B!!$3$N7g4Y$O(B Adobe Reader / Acrobat 8.x $B$G$O=$@5$5$l$F$$$k!D!D$,!"(B8.x $B$K0\9T$G$-$k4D6-$O8B$i$l$F$$$k(B$B!#(B APSA07-01: Cross-site scripting vulnerability in versions 7.0.8 and earlier of Adobe Reader and Acrobat (Adobe) $B$K$h$k$H!"(BAdobe Reader / Acrobat 7.0.9 Update $B$,Mh=5Cf$KEP>l$9$kLOMM!#(B

For users who cannot upgrade to Reader 8, the Secure Software Engineering team is working with the Adobe Reader Engineering team on a 7.0.9 update to versions 7.0.8 and earlier of Adobe Reader and Acrobat that will resolve this issue, which is expected to be available in the next week.

$B!!$3$N7g4Y$r2sHr$9$k$K$O!"(Bweb $B%V%i%&%6$K$*$$$F(B PDF $B%U%!%$%k$r(B Adobe Reader / Acrobat $B%W%i%0%$%s$K=hM}$5$;$J$$$h$&$K$9$l$P$h$$!#(B web $B%V%i%&%6B&$G@_Dj$9$kJ}K!$H!"(Bweb $B%5!<%PB&$G@_Dj$9$kJ}K!$,$"$k!#(B

web $B%V%i%&%6(B: .pdf $B$KBP$7$F(B Adobe Reader / Acrobat $B%W%i%0%$%s$r;H$o$J$$$h$&$K$9$k!#(B

IE 6: SP2 $B$G$"$l$P!"(B[$B%"%I%*%s$N4IM}(B] $B$G(B Adobe Reader / Acrobat $B%W%i%0%$%s$rL58z$K$9$l$P$$$$$s$8$c$J$$$+$J$"!#(B
Firefox: [$B%D!<%k(B] $B%a%K%e!<$N(B [$B%*%W%7%g%s(B] $B$G!"(B [$B%3%s%F%s%D(B] $B%?%V$N%U%!%$%k%?%$%W$N(B [$B4IM}(B] $B$rA*Br$7!"(B PDF $B%U%!%$%k$KBP$7$F!V
web $B%5!<%P(B: .pdf $B$KBP$7$F(B application/octet-stream $B$r;XDj$9$k!#(B

[WEB SECURITY] Universal XSS with PDF files: highly dangerous ("$B=5(B"$B5-(B, 2007.01.04)
Hacking con Browser Plugins (Noticias de Seguridad Inform$(D+!(Btica, 2007.01.03)

$B!!4XO"(B:

APSA07-01: Cross-site scripting vulnerability in versions 7.0.8 and earlier of Adobe Reader and Acrobat (Adobe)
CVE-2007-0045
[SA23483] Adobe Reader Cross-Site Scripting Vulnerability
US-CERT Vulnerability Note VU#815960: Adobe Acrobat Plug-In cross domain violation

2007.01.09 $BDI5-(B:

$B!!4XO"(B:

$B%"%I%S(B Acrobat Reader Plugin $B$N(BPDF $B%U%!%$%k(B $B%/%m%9%5%$%H$H%3!<%I$N (ISSKK)$B!#!VL$Dj!W$P$+$j$,%:%i%j$HJB$V!"$H$$$&$N$,LdBj$N?<9o$5$rI=$o$7$F$$$k$N$+!#(B

2007.01.10 $BDI5-(B:

$B!!(BAdobe Reader / Acrobat 7.0.9 $B%"%C%W%G!<%H$,8x3+$5$l$^$7$?!#(BAdobe Reader / Acrobat 7.0.x $B$NMxMQ

APSB07-01: Update available for vulnerabilities in versions 7.0.8 and earlier of Adobe Reader and Acrobat (Adobe, 2007.01.09)

2007.01.31 $BDI5-(B:

$B!!(BAPSB07-01 $B$H(B APSA07-0[12] $B$NF|K\8lHG$,=P$F$$$^$7$?!#(B

APSA07-01: $B%P!<%8%g%s(B7.0.8$B0JA0$N(BAdobe Reader$B$*$h$S(BAcrobat$B$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0@H (Adobe)
APSA07-02: $B%P!<%8%g%s(B7.0.8$B0JA0$N(BAdobe Reader$B$*$h$S(BAcrobat$B$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0@H (Adobe)
APSB07-01: $B%P!<%8%g%s(B7.0.8$B0JA0$N(BAdobe Reader$B$*$h$S(BAcrobat$B$N@H (Adobe)$B!#(BAdobe Reader 8, Adobe Reader / Acrobat 7.0.9 $B$GBP1~$5$l$?$N$O4{Js$G$9$,!"(BAdobe Reader / Acrobat 6.0.6 $B$G$bBP1~$5$l$?$=$&$G$9!#(B
2007$BG/(B1$B7n(B16$BF|(B -- Windows$BHG(BAdobe Reader$B$*$h$S(BAcrobat 6.0.6$B$N8x3+$K$"$o$;$F>pJs$r99?7(B
($BCfN,(B)
Adobe Reader 6.0$B!A(B6.0.5$B$r$4MxMQ$NJ}$G!"%*%Z%l!<%F%#%s%0%7%9%F%`$N@)Ls$J$I$+$i%P!<%8%g%s(B8$B$^$?$O(B7.0.9$B$X$N%"%C%W%0%l!<%I$,IT2DG=$J$*5RMM$K$O!"(Bhttp://www.adobe.com/jp/downloads$B$+$iF~$C$F!"%P!<%8%g%s(B6.0.6$B$X$N%"%C%W%0%l!<%I$r?d>)$7$^$9!#(B

$B"#(B $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B: 2007.01
(Microsoft, 2007.01.05)

Windows: 3 $B7o!#:GBg?<9oEY$O!V6[5^!W(B
Windows / Visual Studio: 1 $B7o!#:GBg?<9oEY$O!V=EMW!W(B
Windows / Office: 1 $B7o!#:GBg?<9oEY$O!V=EMW!W(B
Office: 3 $B7o!#:GBg?<9oEY$O!V6[5^!W(B

$B!!9g7W(B 8 $B7o$G$9$+!#2C$($F!"(B WSUS / Microsoft Update $B$G$O!V%;%-%e%j%F%#0J30$NM%@hEY$N9b$$99?7%W%m%0%i%`!W$,(B 2 $B7o$"$k$=$&$G$9!#(B

2007.01.06 $BDI5-(B:

$B!!!VEv=i8x3+$7$F$$$?;vA09pCN$NFbMF$rJQ99$7$^$7$?!W$N0l8@$G!"$:$$$V$sFbMF$,JQ99$5$l$^$7$?!#(B

Windows: 1 $B7o!#:GBg?<9oEY$O!V6[5^!W(B
Office: 3 $B7o!#:GBg?<9oEY$O!V6[5^!W(B

$B!!9g7W(B 4 $B7o$HH>8:$7$F$7$^$$$^$7$?!#(B WSUS / Microsoft Update $B$G!V%;%-%e%j%F%#0J30$NM%@hEY$N9b$$99?7%W%m%0%i%`!W$,(B 2 $B7o8x3+$5$l$k!D!D$N$OJQ2=$"$j$^$;$s!#(B

2007.01.10 $BDI5-(B:

$B!!(B4 $B7o=P$^$7$?!#(B1 $B7n$N%;%-%e%j%F%#(B $B%j%j!<%9(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2007.01.10) $B$h$j(B:

$B:#7n$N;vA09pCN$G$O!"Ev=i(B 8 $B7o$H$*CN$i$;$7$F$$$^$7$?$,!"(B4 $B7o$KJQ99$7$^$7$?!#(B $B$3$l$O!"99?7%W%m%0%i%`$NIJ
2007.01.12 $BDI5-(B:

$B!!(BDetection and deployment guidance for the January 9, 2007 security release (Microsoft)

2007.01.16 $BDI5-(B:

$B!!(B2007 $BG/(B 1 $B7n(B $B%;%-%e%j%F%#(B $B%j%j!<%9(B ISO $B%$%a!<%8(B (Microsoft)

$B"#(B 2007.01.02

$B!U(B Fedora Legacy Project $B$,%5!<%S%9=*N;$X(B (slashdot.jp, 1/1)$B!#$5$h$&$J$i!#(B

$B!U(B $BEj9F$N>\:Y(B: $BDLJs$r=hM}$7$-$l$J$$7Y;!$H$$$&4QE@$+$i%3%s%F%s%D5,@)$r$_$k(B ($B:j;3?-IW$N(BBlog, 1/2)$B!#6H3&E*$K$O!"(B38% $B$7$+:o=|$5$l$J$/$F$b!VM=A[0J>e$K:o=|$5$l$?!W$H$$$&I>2A$K$J$k$s$G$9$+!#(B

$B7k6I$N$H$3$m!"$3$NDLJs$,7Y;!$N8=>l$NBP1~G=NO$r1[$($kDLJs7o?t$r$b$?$i$7$F$$$k$N$G$O$J$$$+!"$H$$$&>u67$,5?$o$l$k!#(B

$B"#(B 2007.01.01

$B!U(B $B9HGr2N9g@o!'%@%s%5!<$N0aAu=d$j935DAj ($BKhF|(B, 2006.12.31)$B!#!V0aAu$O!"=w@-$NMg$,%G%6%$%s$5$l$?%\%G%#!<%9!<%D$@$C$?!W$N$@$=$&$G!#(B $B>.NS9,;R!'0aAu$O#1%H%s!"AuCV$O#N#A#S#A$,3+H/(B ($BKhF|(B, 2006.12.31) $B$NJ}$O91Nc$G$9$,(B ($B$A$c$s$HF0$$$F$h$+$C$?$M(B)$B!#(B

$B!!$5$!!"!V(B$BG/$N=i$a$O$5$@$^$5$7(B$B!W$,$O$8$^$C$?$h!#$$$-$J$j!VBp5^JX!W$H$+=P$F$-$F!V;OKv=q(B! $B;OKv=q(B!!$B!W$H$+8@$C$F$k$7!D!D!#%W%m%4%k%U%!!<(B$BC+8}BsLi(B$B$5$s$O$J$<$+$5$@4k2h=jB0$J$N$@$=$&$G!#(B

$B!U(B $B$"$1$^$7$F$*$a$G$H$&$4$6$$$^$9(B$B!#(B $B:#G/$b$h$m$7$/$*4j$$CW$7$^$9!#(B

$B!!$$$$$+$2$s%j%K%e!<%"%k$7$?$$$J$"!#(B

$B;d$K$D$$$F(B