$B%;%-%e%j%F%#%[!<%k(B memo - 2010.10
Last modified: Mon May 30 01:36:58 2011
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
Google, HP, eBay, Yahoo$B$,;`7:@)EY;?@.%3%^!<%7%c%k$K!J4V@\E*$K!K=P;q(B
(techcrunch, 10/29)
$B!U(B
Google$B!"!V>l=j8!:w!W$r3+;O(B
(WIRED VISION, 10/29)
$B!U(B
$B73;v$H<#0B$K79
($B%k!&%b%s%I!&%G%#%W%m%^%F%#!<%/F|K\8l!&EE;RHG(B, 10/28)
$B!U(B
$B%l%"%"!<%9!"Cf9q$,M"=PDd;_A
($BFIGd(B, 10/29)
$B!U(B
$BIT2D2r$JH?F|%G%b!"
($BF|7P(B BP, 10/27)
$B!!(BShockwave Player 11.5.9.615 $BEP>l!#(B
APSA10-04: Security Advisory for Adobe Shockwave Player
(Adobe, 2010.10.21)
(CVE-2010-3653) $B$N7o$r4^$`!"(B
11 $B7o$N7g4Y$,=$@5$5$l$F$$$k!#(B
$B!!(BFlash Player 10.1.85.3 $B0JA0!"(BFlash Player for Android 10.1.95.2 $B0JA0!"(B
$B$*$h$S(B Adobe Reader / Acrobat 9.x $B$N(B authplay.dll $B$K(B 0-day $B7g4Y!#(B
$B4{$K(B Adobe Reader / Acrobat 9.x $B8~$1$N96N,%W%m%0%i%`$,@$$K=P2s$C$F$$$k!#(B
Flash Player $B8~$1$N96N,%W%m%0%i%`$O3NG'$5$l$F$$$J$$!#(B
CVE-2010-3654$B!#(B
Adobe Reader / Acrobat 8.x $B$K$3$N7g4Y$O$J$$!#(B
kenics $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BFlash Player 10.x / Flash Player for Android 10.x $B8~$1$N99?7%W%m%0%i%`$O(B
2010.11.09 $B$K!"(BAdobe Reader / Acrobat 9.x $B8~$1$N99?7%W%m%0%i%`$O!V(B2010.11.15 $B$N=5!W$KDs6!$5$l$kM=Dj!#(B
$B!!(BAdobe Reader / Acrobat 9.x $B$N>l9g$O2sHrJ}K!$,B8:_$9$k!#(B
Windows $BHG(B: authplay.dll $B$r!":o=|$7$?$j!"L>A0$rJQ99(B (rename) $B$7$?$j!"(Bauthplay.dll $B$X$N%"%/%;%9$r6X;_$7$?$j$9$k!#(B
authplay.dll $B$ODL>o!"(B
C:\Program Files\Adobe\Reader 9.0\Reader\authplay.dll (Adobe Reader)
$B$"$k$$$O(B C:\Program Files\Adobe\Acrobat 9.0\Acrobat\authplay.dll (Acrobat)
$B$KB8:_$9$k!#(B
Mac OS X: AuthPlayLib.bundle $B%U%!%$%k$r:o=|$"$k$$$O0\F0$9$k!#(B
$BJ}K!$O(B
APSA10-05
$B$r;2>H!#(B
Linux: libauthplay.so.0.0.0 $B%U%!%$%k$r:o=|$9$k!#(B
$BJ}K!$O(B
APSA10-05
$B$r;2>H!#(B
$B!!(B$B$^$?(B authplay.dll $B$G$9$+!D!D!#4XO"(B:
2010.11.03 $BDI5-(B:
$B!!(BAdobe Reader / Acrobat $B$@$1$G$J$/!"(BFlash $B$K$D$$$F$b(B in-the-wild $B>uBV$KFMF~$7$F$$$kLOMM$G$9!#(B
2010.11.04 $BDI5-(B:
$B!!(BAPSA10-05: Security Advisory for Adobe Flash Player, Adobe Reader and Acrobat
$B$,(B 2010.11.02 $BIU$G2~D{$5$l$F$^$9!#(BFlash Player 10.x for Windows / Mac / Unix $B$NDs6!M=Dj$,(B 2010.11.04 $B$KA0E]$7$5$l$^$7$?(B ($BL@F|$G$9$M(B)$B!#(BFlash Player 10.x for Android $B$O(B 2010.11.09 $B$N$^$^!#(B
2010.11.05 $BDI5-(B:
$B!!!D!D?7HG=P$^$7$?(B: APSB10-26: Security update available for Adobe Flash Player
(Adobe, 2010.11.04)
$B!!4XO"(B:
2010.11.15 $BDI5-(B:
$B!!(BPrenotification: Out-of-Cycle Security Updates for Adobe Reader and Acrobat
(Adobe PSIRT Blog, 2010.11.12)$B!#(BUS $B;~4V$G(B 2010.11.16 $B$@$=$&$G$9!#F|K\$@$H(B 2010.11.17 $B?eMKF|$G$9$M!#(B
2010.11.17 $BDI5-(B:
$B!!(B
APSB10-28: Security updates available for Adobe Reader and Acrobat
(Adobe, 2010.11.16)$B!#(BAdobe Reader / Acrobat 9.4.1 $BEP>l!D!D$G$9$,!"(BWindows / Mac $BHG$N$_!#(BUnix $BHG$O(B
2010.11.30 $B$@$=$&$G$9!#(B
-
HTTP$B%;%C%7%g%s%O%$%8%c%C%/$rl(B
-
-
$B9qFb(B100$Be$G46@wHo32$r3NG'!#!I(Bmstmp$B!I(B $B!I(Blib.dll$B!I(B $B$N%U%!%$%kL>$G3H;6$9$kIT@5%W%m%0%i%`(B
-
$B!!$O$^$b$H$5$s$K$h$k8=>l$+$i$NJs9p(B: $B$$$-$J$j=1$C$F$-$?!V(Bmstmp$B!W%&%#%k%9$KBg$o$i$o(B
($BF|7P(B IT Pro, 2010.10.28)$B!#(B
$B!!?^(B3$B$N%&%#%k%946@w7PO)$N?^$K1h$C$F@bL@$7$h$&!#$^$:!"Ho32o$NJ}K!$G(BWeb$B%5%$%H$r1\Mw$9$k!J?^(B3$B$N4]?t;z(B1$B!K!#$9$k$H!"%[!<%`%Z!<%8%5!<%P!<$KKd$a9~$^$l$?%"%/%;%92r@O%5%$%H$N%W%m%0%i%`$K$h$j%"%/%;%92r@O%5%$%H$XE>Aw$5$l$k!JF1(B2$B!K!#%"%/%;%92r@O%5%$%H$X%"%/%;%9$7$?%f!<%6!<$N(BPC$B$,2~$6$s$5$l$?%9%/%j%W%H$rFI$_9~$s$G
$B!!!V%"%/%;%92r@O%5%$%H!W$C$F!"$=$&$$$&$3$H$G$9$+!D!D!#(B
$B!!$J$*!"$3$l$i$N46@w7PO)$ND4::$K$O%M%C%H%o!<%/%U%)%l%s%8%C%/5!4o$N%Q%1%C%H%V%i%C%/%[!<%k$,;H$o$l$?!#:#2s$N$h$&$JJ#?t$N%I%a%$%s$r$^$?$,$j46@w7PO)$,B?4t$KEO$k$h$&$J>l9g!"K\Ev$K$I$3$,967b85$+$rH=Dj$9$k$N$O!"%I%a%$%sA+0\$7$+$o$+$i$J$$%W%m%-%7%m%0$N>pJs$@$1$G$O;jFq$N6H$G$"$k!#
$B!!$J$k$[$I!D!D!#(B
Critical vulnerability in Firefox 3.5 and Firefox 3.6
$B!!=$@5HG=P$^$7$?!#(BFirefox 3.6.12 / 3.5.15$B!"(BThunderbird 3.1.6 / 3.0.10$B!"(B
SeaMonkey 2.0.10$B!#(B
$B!!4XO"(B:
$B!U(B
ZFS$B$G0E9f2=%G%#%9%/$X<+F0%P%C%/%"%C%W$r
(FreeBSD Daily Topics, 10/26)
$B!U(B
Wi-Fi$BK5JBP:v$H$7$F(B
(ComputerWorld.jp, 10/25)
$B!U(B
$B%8%c!<%J%j%9%H$,:G?7Cf9q%M%C%H8@O@;v>p$r8l$k!J#1!K(!(!(B $BN-6GGH;a!"%D%$%C%?!<$,$b$?$i$98@O@$N<+M3!"$=$7$FAs0f$=$i8=>](I%%%(B
(The Journal, 10/27)
$B!U(B
Zeus $B%\%C%H%M%C%H$N?J2=(B
($B%7%^%s%F%C%/(B, 10/22)
$B!U(B
$B6K3Z$;$-$e$"F|5-(B 2010-10-27$B!#(B$BBh(B1$B2s?@@t%;%-%e%j%F%#JY6/2q(B$BJ}LL!#(B
$B!U(B
Apple decides Flash users need to secure themselves
(Sophos, 10/22)
$B!U(B
$B2$=#(BENISA$B$N%/%i%&%I%3%s%T%e!<%F%#%s%0$N%;%-%e%j%F%#$K4X$9$k%,%$%I%i%$%s$NK]Lu$r8x3+(B
(IPA, 10/25)
$B!U(B
Bredolab$B%\%C%H%M%C%H$,%7%c%C%H%@%&%s(B
($B%(%U%;%-%e%"%V%m%0(B, 10/26)$B!#(B
$B!!LLGr$$$3$H$K!"HH:aBP:v6I$O46@w$7$?(BPC$B$K7Y9p$rAw?.$9$k$HH/I=$7$?!'!V$3$N%M%C%H%o!<%/$+$i$N%&%$%k%9$K46@w$7$?%3%s%T%e!<%?$N%f!<%6$O!"pJs$r4^$`DLCN$r
$B!!$D$^$j!"$*$=$i$/$O4{B8$N%\%C%H%M%C%H%$%s%U%i%9%H%i%/%A%c$r;HMQ$7$F!"%W%m%0%i%`$rAw?.$7!"$9$Y$F$N46@w$7$?%^%7%s$K7Y9p$rI=<($9$k$N$@$m$&!#(B
$B!!$3$&$7$?$3$H$OLGB?$K9T$o$l$J$$!#C/$+$N%3%s%T%e!<%?>e$G$N%3!<%I$N
$B!!(BBredolab $B4XO"(B:
$B!U(B
Inside Adobe Reader Protected Mode - Part 2 - The Sandbox Process
(Adobe Secure Software Engineering Team (ASSET) Blog, 10/26)
$B!U(B
Weekly Roundup of Web Hacking Incidents
(SANS SSI, 10/25)
$B!U(B
AVTOKYO meets HackerJapan $B3+:E(B!
($B$F$C$7!<$N4]=P$7(B, 10/25)
$B!U(B
$B!R%*%j%s%Q%9:[H=!S95AJ?3$N$f$/$(!!!A8wA0J[8n;N$KJ9$/!A(B
(JANJAN blog, 10/23)
$B!U(B
Mr. Anderson $B$,:a>u$rG'$a$k(B
($B%(%U%;%-%e%"%V%m%0(B, 10/23)$B!#%^%k%&%'%":n
$B!U(B
P2P$B%5!<%S%9$N(BLimeWire$B$,Dd;_!!:[H==jL?Na$G(B (ITmedia, 10/27)$B!"(B
LimeWire$B$N=*_a!':9$7;_$aL?Na$r (P2P$B$H$+$=$NJU$N$*OC(B, 10/27)
$B!U(B
$B%F%l%S6IB>AJ8+D>$7$+!!$^$M$-(BTV$BAJ>Y!":G9b:[$,(B12$B7nJ[O@(B
(ITmedia, 10/27)
$B!U(B
$B5;=Q(B4$B
(WIRED VISION, 10/27)$B!#(B
Apple, Google, Facebook, Amazon$B!#(B
$B!U(B
$BOB2N;38)B@COD.!"%7!
(slashdot.jp, 10/27)
$B!U(B
JSCPR$B8x3+9V:B(B2010
$B!VBg3X$K$*$1$k%+%k%HLdBj$N:#!!!]8=>l!&M}O@!&BP:v!]!W(B
($BF|K\C&%+%k%H6(2q(B)$B!#(B2010.11.27$B!"El5~ET?7=I6h!";qNABe(B1000$B1_!#(B
$B!!4XO"(B: $B%+%k%H$N4+M6$KCm0U$7$F$/$@$5$$!*(B ($BN6C+Bg3X(B, 10/26)
$B!U(B
$B%m%U%H%W%i%9%o%s$G0[?'$NJ)65%H!<%/(B
($B$d$dF|4)%+%k%H?7J9(B, 10/27)$B!#(B
$B%]%9%?!<$,%$%s%Q%/%H$"$j$9$.!#(B
$B!U(B
$BH?F|%G%b$h$jI]$+$C$?$b$N(B
($B!VF|CfJ82=8rN.!W$H=q$$$F%*%?3hF0$HFI$`(B, 10/22)$B!#(B
SARS $B$JOC!#(B
$B!U(B
$BK($(%-%c%i!V$R$N$b$H(B $B$*$K$3!W$rAO:n$7$FF|Cf4X78$r!D!D(B?
(slashdot.jp, 10/27)$B!#$9$P$i$7$$!#(B
$B!!(BFirefox 3.5 / 3.6 $B$N(B JavaScript $Bu$G2sHr$9$k$K$O!"(BJavaScript $B$rL58z2=$9$k$7$+$J$$!#(B
$B4XO"(B:
2010.10.28 $BDI5-(B:
$B!!=$@5HG=P$^$7$?!#(BFirefox 3.6.12 / 3.5.15$B!"(BThunderbird 3.1.6 / 3.0.10$B!"(B
SeaMonkey 2.0.10$B!#(B
$B!!4XO"(B:
2010.11.01 $BDI5-(B:
$B!!(BUsing the Browser Cache to Bypass Security
(Symantec, 2010.10.28) $B$NF|K\8lHG(B: $B%V%i%&%6$N%-%c%C%7%e$rMxMQ$7$?%;%-%e%j%F%#$N2sHr(B
($B%7%^%s%F%C%/(B, 2010.10.28)
$B!U(B
$B!X8SED4`$OL5
(JANJAN blog, 10/23)
$B!U(B
$B;TL1%G%b(B $B!V8!;!$H%^%9%3%_$N2#K=$r5v$9$J!W(B ($BEDCfN6:n%8%c!<%J%k(B, 10/24)
$B!U(B
COP10$B2q>l$K$F>e4X86H/%"%/%7%g%sE83+!#8=CO$G$O:G8e$NBfA%$,B`;6!#(B
(JANJAN blog, 10/25)
*1 $B<9Y9$K?&
$BGrD;9q:]2q5D>lFbIt$G$O$J$/!"<~JU$NF;O)>e$G
$B$H$/$K0lHL?M$N?MDL$j$N>/$J$$%(%j%"$G$O!"=0?M$N4F;k$,$J$$$?$a$+!"7Y;!$N2#K=$b$+$J$j$N$b$N$G$"$k!#(B
$B2q5D>lFb$K$O!"?M8"0U<1$b9b$$(BNGO$B$N%V!<%9$b$"$C$F$+!"$=$N$h$&$J?&
$B!U(B
$B!V0l9o$bAa$/GI8/K!$N2~@5$r!W(B $B9q2q$KMW@A(B
($BEDCfN6:n%8%c!<%J%k(B, 10/25)
$B!!GI8/K!$N2~@5$O!";21!$GLnE^$,2aH>?t$r@j$a$F$$$k$3$H$+$i@.N)$OHyL/$J>p@*$@!#8|O+9T@/$K?<$/4X$o$kJ#?t$N5D0w$O!V!J3X2q0w$,B?$$!KCf>.!&Nm:Y4k6H$KG[N8$9$k$h$&$K=$@5$r2C$($F!"8xL@E^$r>e
$B!U(B
$B!VG{$j
($B$_$d$-$AF|5-(B, 10/23)
$B!U(B
$B%;%k%S%"$N%2%$%Q%l!<%I$GH?BPGI$,K=EL2=!">/$J$/$H$b(B141$B?M$,Ii=}(B
($B$_$d$-$AF|5-(B, 10/23)
$B!U(B
Windows Server 2008 $B%Y!<%9$N%3%s%T%e!<%?!<$G!"%3%^%s%I(B $B%W%m%s%W%H$i$+$i%"%W%j%1!<%7%g%s$rl9g$,$"$k(B
(Microsoft KB 2453240)$B!#$$$-$J$j:F5/F0$M$?!#(BHotfix $B$O$^$@$J$$!#(B
$B$3$N8=>]$O!"(BWINSRV.DLL $B$K$*$1$k%3%s%=!<%k(B IME $B$KBP$9$k=hM}$KLdBj$,$"$j!"IT@5$J%"%I%l%9$X$N%"%/%;%9$,H/@8$7$F$7$^$&>r7o$,$"$k$?$a$KH/@8$7$^$9!#(B
$B%3%s%=!<%k(B IME $B$KBP$9$kA`:n$N%$%Y%s%H$,FC$KI,MWL5$$>l9g$O!"0J2<$N%l%8%9%H%j(B $B%-!<$N@_Dj$rJQ99$7!"%3%s%=!<%k(B IME $B$rL58z$K$9$k$3$H$G!">c32$NH/@8$rM^;_$9$k$3$H$,$G$-$^$9!#(B
$B!U(B
NHK$BHVAH2~JT;v7oAJ>Y$NA4MF$,L@$i$+$K$J$k#2:}$,6aF|H/Gd!D5-G0%$%Y%s%H$G$OD90f$5$s$N9V1i$b(B
($B>pJsN.DLB%?J7W2h(B by $B%d%a5-
($B>.EgCm(B: $B=PHG5-G0(B) $B%7%s%]%8%&%`$,!"#1#07n#3#0F|8a8e#1;~H>!"L@<#Bg3X=Y2OBf%-%c%s%Q%9!&%j%P%F%#!<%?%o!<#13,#1#0#1#19f<<$G3+$+$l$k!#@/<#2H$N05NO$r9pGr$7$?Ev;~$NHVAHC4Ev%G%9%/D90f6G$5$s$,=P1i$7!"$$$^$@$+$i8@$($kOC$r$7$F$/$l$k$3$H$K$J$C$F$$$k!#(B
$B!!(B@random $B$JJY6/2q(B$B$H$*$b$$$C$-$j$+$V$C$F$k$J!D!D!#(B
$B!!$=$&$=$&!"H/9T$5$l$k;qNA=8$HI>2A=8$O
$B!|#N#H#K:[H=5-O?=8!X=w@-9q:]@oHHK!Dn!=#N#H#KHVAH2~JQ;v7o:[H=(B
$B!!!!5-O?=8!!!JF|K\I>O@
$B!|#N#H#K:[H=I>2A=8!XK=$+$l$???
$B!==w@-9q:]@oHHK!Dn$K$*$1$k@/<#2pF~!=!Y!J8=Be=q4[!K(B
$B!!F|K\I>O@$B!V#N#H#K:[H=;qNA=8!W!&!VI>2A=8!W=PHG5-G0%7%s%]%8%&%`(B $B#N#H#KHVAH2~JQ;v7o!"(B10$BG/L\$N8!>Z(B ($B#N#H#K$r4F;k!&7cNe$9$k;kD0$B6a4)0FFb(B
$B$K0FFb$,:\$C$F$$$k!#(B
$B$3$A$i$O!VDj2A#2#6#0#01_!\@G!W!#(B
$B!U(B
$B%+%b$N$U$s$+$iD;%$%s%U%k%&%$%k%9!!KL3$F;CUFb(B
(asahi.com, 10/26)$B!#(BH5N1$B!#(B
$B!U(B
Mac$B$N(BJava$B%5%]!<%H$O=*N;$+!)(B--Apple$B$,!H8+@Z$k!I1F6A$r9M$($k(B
(ZDNet, 10/26)
$B!U(B
ISP$B!V$W$i$i!W!";yF8%]%k%N%5%$%H$N%U%#%k%?%j%s%05!G=$rDI2C(B
(Internet Watch, 10/26)
$B!U(B
$B$+$s$?$s%m%0%$%sJ}<0$GO31L;v8N$,H/@8(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 10/25)$B!#(B
$B7HBSHG!V%/%m%M%3%a%s%P!<%:$N(BWeb$B%5!<%S%9!W(B
$B%/%$%C%/%m%0%$%s5!G=$N@H
$B$N7o!#(B
$B:#2s!"0U?^$7$?967b$G$O$J$/!"IT0U$KB>?M$N>pJs$,8+$($F$7$^$&;v8N$,H/@8$7$?$N$O!"(BSBrowser$BMxMQuBV$N@_Dj$G;HMQ$7$F$$$F!"$+$D!"kp$o$l$F$$$k!V7HBS%5%$%H$N%F%9%H!WMQES$G$O$J$/!"
$B!!4XO"(B:
$B!U(B
$B:G9b8!;!D#!"!V8!;!41$,I,MW$J$$$HH=CG$7$?%a%b$OB.$d$+$KGQ4~$;$h!W$H;X<($7$F$$$?$3$H$rG'$a$k(B$B!#(B
10/24 $B$N$D$E$-!#(B
$B!U(B
AKARI 1.0.2 $B$r%j%j!<%9$7$^$7$?!#(B
($B7'G-$5$/$i$N%V%m%0(B, 10/25)$B!#;EMMJQ99!"5!G=8~>e!"IT6q9g=$@5!#(B
$B!!(BLinux 2.6.30 $B!A(B 2.6.36-rc8 $B$K7g4Y!#(BReliable Datagram Sockets (RDS)
$B%W%m%H%3%k$N=hM}$K7g4Y$,$"$j!"(Blocal user $B$,(B root $B8"8B$rC%CVE-2010-3904
$B!!(BLinux 2.6.36 $B$G$OD>$C$F$$$k$_$?$$!#4XO"(B:
$B!!(BFirefox $BMQ$N%"%I%*%s(B Firesheep 0.1 $BEP>l!#(BAmazon $B$d(B Google$B!"(BWindows Live$B!"(BFacebook$B!"(BTwitter$B!"(BEvernote$B!"(BDropbox $B$J$I$KBP$7$F!"%*!<%W%s%o%$%d%l%9%M%C%H%o!<%/$K$*$1$k(B HTTP $B%;%C%7%g%s%O%$%8%c%C%/$,2DG=$JLOMM!#(B
$B!!4XO"(B:
2010.10.28 $BDI5-(B:
$B!!(BFiresheep $B$K4X$9$k(B Mozilla $B%;%-%e%j%F%#%A!<%`$+$i$N%3%a%s%H(B
(Mozilla Japan $B%V%m%0(B, 2010.10.28)
2010.11.09 $BDI5-(B:
$B!!(BBlackSheep - $B62I]$N%O%$%8%c%C%+!l(B
(techcrunch, 2010.11.09)
2010.11.11 $BDI5-(B:
$B!!4XO"(B:
2010.11.24 $BDI5-(B:
$B!!(B$B%;%C%7%g%s%O%$%8%c%C%/%D!<%k(BFiresheep$B$HBP93%"%I%*%s(BBlacksheep$B$r8!>Z$7$F$_$?(B
(security.gs, 2010.11.20)
$B!U(B
$B!Z8=>l%k%]![@m3U=tEg>eN&$r$a$0$k!V$J$s$@$+$J!
($B=5%W%l%K%e!<%9(B, 10/25)$B!#5y$/$i$$$5$;$F$d$l$h!#(B
$B!U(B
The "Enforce password history" and "Minimum password age" Group Policy settings do not work when you reset the password for a Windows Server 2008 R2-based computer
(Microsoft KB 2386717)$B!#(BHotfix $B$"$j$^$9!#(B
$B!U(B
Share$B%f!<%6!<$N(B2$B3d!&(B2$BK|?M0J>e$,;yF8%]%k%N%3%l%/%?!<$H$ND4::7k2L(B
(Internet Watch, 10/22)
$B!!D4::$G$O!"(BShare$B$N!V%/%i%9%?!W@_Dj$K4p$E$-%+%&%s%H$7$?!#6qBNE*$K$O!";yF8%]%k%N2hA|$NN.DL$K$h$/MQ$$$i$l$k%T%s%]%$%s%HE*$J!HFC
$B!!$?$@$7!"D4::$O$"$/$^$G$b%/%i%9%?%o!<%I$K4p$E$$$?$b$N$G$"$j!"
$B!!$H$O8@$(!"(B$B%$%s%?!<%M%C%HMxMQ
$B$J$N$G!"(B2 $BK|?M(B = 0.02% $B$H$$$&$N$O!"$=$s$J$b$s$+$J$H$$$&5$$,$9$k?t;z!#(B
$B!U(B
$B7HBSHG!V%/%m%M%3%a%s%P!<%:$N(BWeb$B%5!<%S%9!W(B
$B%/%$%C%/%m%0%$%s5!G=$N@H
($B%d%^%H1?M"(B, 10/25)$B!#%1!<%?%$(B ID $B$M$?!#$J$s$b9M$($F$J$+$C$?$N$G!"%1!<%?%$(B ID $B:>>N$G$=$N$^$^DL$l$A$c$C$?!#(B
$B%Q%9%o!<%IG'>Z$,I,?\$H$J$k$h$&2~=$$7$FBP1~!#(B
HAMUCHI $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B4XO"(B:
$B%/%$%C%/%m%0%$%s$K!H7j!I!"%d%^%H1?M"$N7HBS(BWeb$B%5%$%H$K@H
(ITmedia, 10/25)
$B#i#P#h#o#n#e$G?M$N>pJs4]8+$(!D1\Mw%=%U%H860x(B
($BFIGd(B, 10/25)$B!#$A$g$C$H$"$l$J5-;v!#(B
YOMIURI ONLINE$B$K7G:\$5$l$?!V(BiPhone$B$G?M$N>pJs4]8+$(!W5-;v$K$D$$$F!"Ev;v
(Moba Photo Life!!, 10/25)$B!#$D$J$,$C$F$S$C$/$j$7$?Ev?M$NOC!#(B
$B$H$j$"$($:2hLL%-%c%W%A%c$r;#1F$7$?8e!J(BiPhone$B$O%-%c%W%A%c$,$9$0;#$l$F$3$&$$$&;~$K=u$+$k!K!"%/%m%M%3%d%^%H$KDLJs$9$k$Y$-$+$H:G=i$O;W$C$?$,!"0lHL?M$,8@$C$?$H$3$m$GJ9$$$F$b$i$($k$+$OJ,$+$i$J$$$7!"$=$b$=$b$I$3$K$I$&DLJs$7$F$$$$$N$+$bA4$/J,$+$i$J$$!#(B
$B$=$3$G!"%;%-%e%j%F%#$N@lLg2H$G$"$k9bLZ9@8w;a$KAjCL$N%a!<%k$rAw$C$?
JPCERT/CC $B$O9-Js$r!V(B$B$b$&$9$3$7$,$s$P$j$^$7$g$&(B$B!W!#(B
$B$3$&$$$&>l9g$NFO=P$O$3$A$i$+$i(B: $B%$%s%7%G%s%H$NJs9p(B (Web $B%U%)!<%`(B) (JPCERT/CC)
$B!V0lHL?M$,8@$C$?$H$3$m$GJ9$$$F$b$i$($k$+$OJ,$+$i$J$$!W$H$$$&G'<1$O@5$7$$$G$9!#(B
$BJL$N0U?^(B ($B$f$9$j!"$?$+$jEy(B) $B$,$"$k$N$+$H4*$0$i$l$?$j$9$k$3$H$b$"$j$^$9$+$i!"D>@\$d$j$H$j$9$k;v$O?d>)$7$^$;$s!#(B
$B$^$?!"(B$B%&%'%V%"%W%j%1!<%7%g%s@HpJs$NFO=P(B
(IPA) $B$O0lHL?M$K$OI_5o$,9b$9$.$k$H;W$&$N$G!";d$O?d>)$7$^$;$s!#(B
$B%1!<%?%$G>$,Bg
($B9bLZ9@8w!w<+Bp$NF|5-(B, 4/17)$B!#9bLZ$5$s$N$H$3$m$O!"$D$J$,$j$K$/$/$J$C$F$$$kLOMM$G$9!#(B
$B!U(B
$B;0I)EE5!(BIS$B[)$/!V(B2005$BG/$KA[Dj$7$?@_7W!&9=C[!"@=IJ$K7g4Y$H$O9M$($F$$$J$$!W(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 10/24)
$B!U(B
Google$B!"(BStreet View$B$G%Q%9%o!<%I>pJs$J$I$b
($BF|7P(B IT Pro, 10/25)
$B!U(B
Dear Microsoft: Please Stop Pushing Potentially Unwanted Software Through Windows Update
(Panda Research, 10/23)$B!#(BPUA $B07$$!#$^$!!"ITMW$J?M$K$H$C$F$O$=$&$@$h$J$"!#(B
$B!U(B
$B4ZJF!":#7nKv$N6uJl;22CO"9g71N}$rCf;_(B
($BCf1{F|Js(B, 10/25)
$B!U(B
Web$B%a%G%#%"$N5,LO=L>.$,B3$/(B
(fx-it.com, 10/25)$B!#(B10$B!A(B20% $B8:$G$9$+!#$=$NJ,%=!<%7%c%k7O%a%G%#%"$KN.$l$F$$$k$N$+$J$"!#(B
$B!U(B
$B%O%W%K%s%0B3=P$G$b%l!<%9$O@.N)(B!?$B!!(B
F1$B4Z9q(BGP$B$,?e$r:9$7$?%?%$%H%kAh$$!#(B
(Number, 10/25)
$B!!$A$g$&$I$=$N$3$m!"%5!<%-%C%H$N30$G$bLdBj$,H/@8$7$F$$$?!#1+$G$L$+$k$s$@Csl$Xh$jl$K6n$1$D$1$?$N$G$"$k!#(B
$B!!$R$I$$OC$@$J$"!#(B
$B!U(B
$B!VBg3XF~;n%;%s%?!<;n83!W$,(B2$BuBV$O$h$j82Cx$K(B
(gigazine, 10/25)
$B!U(B
$B6&;:E^!&@/I\$X$ND>@\HcH=$b!!Cf9q3FCO$GH?F|%G%b(B
(asahi.com, 10/25)
$B!VB?E^@)$rF3F~$;$h!W!V=;Bp$,9b$9$.$k!W$H$$$C$?2#CGKk$b7G$2$i$l!"Cf9q6&;:E^!&@/I\$rD>@\HcH=$9$kAJ$($,8=$l;O$a$?!#(B($BCfN,(B)
$B!!L\7b$,O"9T$5$l$?$H$N>pJs$b$"$k!#(B
$B9qFb(B100$Be$G46@wHo32$r3NG'!#!I(Bmstmp$B!I(B $B!I(Blib.dll$B!I(B $B$N%U%!%$%kL>$G3H;6$9$kIT@5%W%m%0%i%`(B
$B!!(B$B!V(Bmstmp$B!W7O%&%#%k%9Jd407W2h(B
($B%O%K!<%]%C%?!<$NIt20(B, 2010.10.22)$B!#(B
$B%^%+%U%#!<$,$@$a$@$a$@$C$?LOMM$G$9$,!"%^%+%U%#!<$J?M$O(B Artemis $B;H$C$F$F$b$@$a$@$a$@$C$?$N$+$J$"!#(BArtemis $B;H$C$F$J$$>l9g!"%^%+%U%#!<$OA4$/;H$$J*$K$J$i$J$$$H8D?ME*$K$O;W$C$F$^$9!#(B
$B!!$BN6C+Bg3XM}9)3XIt$K$*$1$k%&%$%k%946@w;vNc(B part 2
$B!U(B
Linux$B%+!<%M%k(B2.6.36$B%j%j!<%9!"(BAppArmor$B$,%^!<%8$5$l$k(B
(sourceforge.jp, 10/22)$B!#$*$a$G$H$&$4$6$$$^$9!#(B
$B!!$A$J$_$K!":rF|(B 10/21 $B$O(B$B$"$+$j$NF|(B$B$@$C$?LOMM!#(BAKARI $B$A$c$s(B$B$b$,$s$P$l!#(B($B$8$c$,%P%?!<$,?)$Y$?$/$J$C$?!D!D(B)
$B!U(B
One Year Later: Metasploit Framework 3.5.0 Released!
(Metasploit.com, 10/20)
$B!U(B
$B%"%C%W%k!"!V(BMac OS X$B!W$N(BJava$B$r99?7(B--$B:#8e$NF1:-Cf;_$r<(:6(B
(CNET, 10/22)$B!"(B
Java for Mac OS X 10.6 Update 3 and 10.5 Update 8 Release Notes
(developer.apple.com, 10/20)
$B!U(B
$B%-%W%m%9$G$NCOMkE15n$,(B25000$B8D$K(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/22)$B!#COMk$OJXMx$JIp4o$J$N$@$1$I!"8e$+$?$E$1$,BgJQ$J$s$@$h$M!#(B
$B!U(B
$B5-
($BKhF|(B, 10/19)
$B!!$@$,!"L1.Bt0lO:85BeI=$r@/<#;q6b5,@5K!0cH?$G5/AJ$9$Y$-$@$H$7$?El5~Bh#58!;!?3::2q$N5D7h$O!"$=$NEvH]$OJL$K$7$F!"M}M3$K5?Ld$r46$8$?!#5D7hMW;]!J#1#07n#4F|8xI=!K$G!V9qL1$O:[H==j$K$h$C$FL5:a$J$N$+M-:a$J$N$+$rH=CG$7$F$b$i$&8"Mx$,$"$k!W$HL@5-$7$?$,!"$"$kK!Ab4X78/$J$/$J$$$H;W$&!#(B
$B!U(B
$B8}D}1V2~$a$F!V%7%m!W!!5\:j8)$,3NG'!"ElIt$bC\;::F3+$X(B
(asahi.com, 10/22)
$B!U(B
$BD+F|?7J9!VNW>2;n83Cf$N4b<#NE%o%/%A%s!W5-;v!J(B2010$BG/(B10$B7n(B15$BF|!K$K8+$i$l$k;v
($BF|7P(B Medical Online, 10/21)$B!#(B
$B%9%H!<%j!<$"$j$-$NJsF;(B?
$B!!:#2s$ND+F|?7J9$N5-;v$r8+$k$H!"$+$J$j@N$N$3$H$G$9$,!"9bn2$J<+A3J]8n$NL$K=}$D$1$?;v7o$,$"$C$?$3$H$r$D$$;W$$=P$7$F$7$^$$$^$9!#:#2s!"=}$D$1$i$l$?$N$O!"0e2J3X8&5f=j$K$*$1$kNW>2;n83$K$+$+$o$kK\Ev$N;Q$G$"$j!"0eNE3+H/$K7H$o$k8&5f$r$D$J$4$&$H$7$F$$$kA49q$N45
($BCfN,(B)
$B!!:#2s$NJsF;$G$O!"?7$7$$0eNE3+H/$Ku$rK:$l$k$Y$-$G$O$J$$$G$7$g$&!#D+F|?7J9$O(B10$B7n(B16$BF|$K!"!V0e2J3X8&5f=j$O:#2s$N=P7l$rB>;\@_$KEA$($k$Y$-$G$"$C$?!W$H$$$&
$B!!4XO"(B:
$B!U(B
$B!VF|K\$N8=>l!!COJ};f$GFI$`!W$N=qI>(B
($B%K%e!<%9$N8=>l$G9M$($k$3$H(B, 10/22)$B!#$*$b$7$m$=$&$J$N$GH/Cm$7$?!#(B
$B!U(B
$B@P86CN;v$,C[CO0\E>M=;;<99T$rI=L@!!L1
($B;:7P(B MSN, 10/22)
$B!U(B
$B%3!<%9$O$"$k$1$I!D!D;\@_$OL$40@.!#(B
$B
(Number, 10/22)
$B$^$?!"4X78
$B!!$$$o$f$k%i%V%[%F%k$@$=$&$G!#(B
$B%3%j%"$KCe$$$?%`%K%@!*(B ($B%T!<%N!*(B $B%T!<%N!*(B $B$^$C$A$c$s$NK\!H>>!IE>E]5-(B, 10/21)
$B3N$+$K$A$g$C$H$7$?$i!">P$$OC$K=PMh$k$+$b$7$s$J$$$1$I$5!"4Z9q(BGP$B$NR2p$7$?%[%F%k$,$3$l$G!D!D!"$b$7%l!<%9%&%$!<%/$K2?$+$"$C$?$i!"$I!<$9$k$s$G$7$g!)(B
$B%i%V%[$G$*Gq$j!#(B ($B6b;RGn%+%a%i%^%s$N#F!]#1;#1F@83h$H#C#B(B750$B$H$/$k$^
$B!U(B
$B4Z9q(B GP$B!"$J$*$b@d;?9);vCf(B
$B!U(B
$BF|K\%Y%j%5%$%s$N(BObjectSigning $BBP1~(B Digital ID $B$,%;%-%e%j%F%#5!G=$KDjI>$N$"$k(BFirefox$B$KBP1~!!(B
2048bit$B2=$r
(VeriSign, 10/21)
$B%3!<%I%5%$%K%s%0>ZL@=q"((B1$B!V(BObject Signing$BBP1~(BDigital ID$B!W"((B2$B$N?=@AMQ%V%i%&%6$r!"$3$NEY!"=>Mh$N(BNetscape$B$+$i(BFirefox3.6$B!J0J9_!K$KJQ99$7!"BP1~=pL>%D!<%k$K$O(Bjarsigner$B$rDI2C$7$^$7$?!#(B
$B!U(B
$B$"$J$?$O%8%g%s$h$j8-$$!)(B
($B%(%U%;%-%e%"%V%m%0(B, 10/21)$B!#$J$+$J$+6/Nu$G$9$M!#(B
$B!U(B
$B$3$l$>CN:b9b:[!*$H$$$&$Y$-H=7h!A!V0zMQ!WM}O@$N?7$?$JE83+(B
($B4k6HK!L3@o;N$N;(46(B, 10/18)$B!#(B
$B$H$$$&$+!"$3$l$,$U$D$&$N463P$@$H;W$&$N$@$1$I!#(B
$B!U(B
$BKvC
($B$d$dF|4)%+%k%H?7J9(B, 10/22)
$B!U(B
$B@HpJs%G!<%?%Y!<%9(BJVN iPedia$B$NEPO?>u67(B
[2010$BG/Bh(B3$B;MH>4|!J(B7$B7n!A(B9$B7n!K(B]
(IPA, 10/20)
$B!U(B
$B%=%U%H%&%(%"Ey$N@HpJs$K4X$9$kFO=P>u67(B [ 2010$BG/Bh(B3$B;MH>4|(B (7$B7n!A(B9$B7n(B)]
(JPCERT/CC, 10/21)$B!"(B
$B%=%U%H%&%'%"Ey$N@HpJs$K4X$9$kFO=P>u67(B
[2010$BG/Bh(B3$B;MH>4|!J(B7$B7n!A(B9$B7n!K(B]
(IPA, 10/21)
$B!U(B
$B%U%#%C%7%s%0BP:v%;%_%J!<3+:E$N$40FFb(B
(JPCERT/CC, 10/21)$B!#(B
2010.11.17 ($BEl5~ET@iBeED6h(B) / 11.18 ($BBg:eI\Bg:e;T(B) / 11.19 ($BJ!2,8)J!2,;T(B)$B!"L5NA!#(B
$B!U(B
$B!VAH9~$_%7%9%F%`$K>pJs%;%-%e%j%F%#$r!W%;%_%J!<3+:E$N$*CN$i$;(B
$B!A>pJs%;%-%e%j%F%#LL$G$b0BA4$J@=IJ3+H/$K8~$1$F!A(B
(IPA, 10/21)$B!#(B
2010.11.02 / 22$B!"El5~ETJ85~6h!"L5NA!#(B11.02 $B$N2s$NJg=8$,3+;O$5$l$F$$$k!#(B
$B!!$$$h$$$h%j%"%k$K$3$&$$$&;~Be$K$J$C$F$-$?!#(B
$B!!$J$s$+9-$,$C$F$$$k$i$7$$(B mstmp $BOC!#(B
$B%H%l%s%I%^%$%/%m$N%5%]!<%H%;%s%?!<$X$NLd$$9g$o$;$O!"(B2010$BG/(B10$B7n(B14$BF|0J9_!"(B100$B
$B46@wJs9p$NBgH>$OF|K\9qFb$K=8Cf$7$F$*$j!"F|K\$rI8E*$H$7$?%?!<%2%C%H967b$G$"$k2DG=@-$b9M$($i$l$^$9!#(B
$B!!F|K\$G$@$19-$,$C$F$$$k$?$a$K!"@$3&E*$K$OOCBj$K$J$C$F$J$$(B?
2010.10.23 $BDI5-(B:
$B!!(B$B!V(Bmstmp$B!W7O%&%#%k%9Jd407W2h(B
($B%O%K!<%]%C%?!<$NIt20(B, 2010.10.22)$B!#(B
$B%^%+%U%#!<$,$@$a$@$a$@$C$?LOMM$G$9$,!"%^%+%U%#!<$J?M$O(B Artemis $B;H$C$F$F$b$@$a$@$a$@$C$?$N$+$J$"!#(BArtemis $B;H$C$F$J$$>l9g!"%^%+%U%#!<$OA4$/;H$$J*$K$J$i$J$$$H8D?ME*$K$O;W$C$F$^$9!#(B
$B!!$BN6C+Bg3XM}9)3XIt$K$*$1$k%&%$%k%946@w;vNc(B part 2
2010.10.27 $BDI5-(B:
$B!!4XO"(B:
2010.10.28 $BDI5-(B:
$B!!$O$^$b$H$5$s$K$h$k8=>l$+$i$NJs9p(B: $B$$$-$J$j=1$C$F$-$?!V(Bmstmp$B!W%&%#%k%9$KBg$o$i$o(B
($BF|7P(B IT Pro, 2010.10.28)$B!#(B
$B!!?^(B3$B$N%&%#%k%946@w7PO)$N?^$K1h$C$F@bL@$7$h$&!#$^$:!"Ho32o$NJ}K!$G(BWeb$B%5%$%H$r1\Mw$9$k!J?^(B3$B$N4]?t;z(B1$B!K!#$9$k$H!"%[!<%`%Z!<%8%5!<%P!<$KKd$a9~$^$l$?%"%/%;%92r@O%5%$%H$N%W%m%0%i%`$K$h$j%"%/%;%92r@O%5%$%H$XE>Aw$5$l$k!JF1(B2$B!K!#%"%/%;%92r@O%5%$%H$X%"%/%;%9$7$?%f!<%6!<$N(BPC$B$,2~$6$s$5$l$?%9%/%j%W%H$rFI$_9~$s$G
$B!!!V%"%/%;%92r@O%5%$%H!W$C$F!"$=$&$$$&$3$H$G$9$+!D!D!#(B
$B!!$J$*!"$3$l$i$N46@w7PO)$ND4::$K$O%M%C%H%o!<%/%U%)%l%s%8%C%/5!4o$N%Q%1%C%H%V%i%C%/%[!<%k$,;H$o$l$?!#:#2s$N$h$&$JJ#?t$N%I%a%$%s$r$^$?$,$j46@w7PO)$,B?4t$KEO$k$h$&$J>l9g!"K\Ev$K$I$3$,967b85$+$rH=Dj$9$k$N$O!"%I%a%$%sA+0\$7$+$o$+$i$J$$%W%m%-%7%m%0$N>pJs$@$1$G$O;jFq$N6H$G$"$k!#
$B!!$J$k$[$I!D!D!#(B
2010.11.01 $BDI5-(B:
$B!!(B$B!ZCm0U4-5/![Bg%5%$%H$N1\Mw$GH/@8$7$?%3%s%T%e!<%?%&%$%k%946@w$K$D$$$F(B
(LAC, 2010.10.29)
$B2<5-(BIP$B%"%I%l%9$X$N%"%/%;%9$r9T$C$F$$$k(BPC$B$O!"46@w$7$F$$$k2DG=@-$,$"$k$?$a!"3:Ev$9$k(BPC$B$,$J$$$+$r$43NG'$$$?$@$/$3$H!"$^$?3:Ev(BPC$B$,$"$k>l9g$O$=$l$rFCDj$7!"%&%$%k%9$N6n=|$r9T$C$F$/$@$5$$!#(B
$B!N(B64.27.25.223$B!O!"!N(B64.27.25.224$B!O!"!N(B88.80.7.152$B!O!"!N(B85.17.209.3$B!O!"!N(B95.211.111.229$B!O!"(B
$B!N(B95.211.108.93$B!O!"!N(B178.63.62.19$B!O(B
$B!!(B$B%"%U%#%j%(%$%H$K$h$k6bA,
($B%H%l%s%I%^%$%/%m(B $B%;%-%e%j%F%#(B blog, 2010.10.29)
2010.11.03 $BDI5-(B:
$B!!(BCompromised Websites Use Java Flaws, Hit Japanese Users
(trendmicro blog, 2010.11.02)
2010.11.12 $BDI5-(B:
$B!!(BCompromised Websites Used For Affiliate Scams
(trendmicro blog, 2010.11.11)$B!#(B$B%"%U%#%j%(%$%H$K$h$k6bA,
($B%H%l%s%I%^%$%/%m(B $B%;%-%e%j%F%#(B blog, 2010.10.29) $B$N1Q8lHG$+$J!#(B
2010.10.29 $BDI5-(B:
$B!!(BAPSA10-04: Security Advisory for Adobe Shockwave Player
(Adobe, 2010.10.21) $B$G$9$,!"(BAPSB10-25
(Adobe, 2010.10.28)
$B$G=$@5$5$l$^$7$?!#(B
-
Sleipnir 2.9.5 $B@5<0HG(B $B%j%j!<%9%N!<%H(B[2010/10/21]
-
$B!!(BJVN $B$+$i$b=P$^$7$?(B:
$B!!(BGrani $B$K$bF1$8LdBj$,$"$j!"(BGrani 4.4 $B$G=$@5$5$l$F$$$^$9!#(B
Firefox 3.6.11 / 3.5.14$B!"(BThunderbird 3.1.5 / 3.0.9 $BEP>l(B
$B!!(BSeaMonkey 2.0.9
$B$b=P$F$$$^$9!#(Btvb19131 $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
IPCC$B$N2J3XE*CN8+$H@/:v(!(!(BIAC$BD4::Js9p!NA0JT!O!!(B
$B8,5u$K
($BF|7P(B BP, 10/18)$B!"(B
IPCC$B$K4X$9$kM-<1
(Yamaguchi Mitsutsune Homepage, 9/30)
$B!U(B
NTT$BElF|K\$N%U%l%C%D(B $B8w%M%/%9%H>c32!"860x$O(BDNS$B%5!<%P!<$NA`:n%_%9(B
($BF|7P(B IT Pro, 10/19)
$B!U(B
TCG$BF|K\;YIt(B(JRF) $BBhFs2s(B $B8x3+%;%-%e%j%F%#!<%o!<%/%7%g%C%W(B - $B%G%#%9%/0E9f2=I8=`5;=Q!J(BTCG/OPAL$B!K(B
(trustedcomputinggroup.org)$B!#(B
2010.11.04$B!"El5~ETCf1{6h!"L5NA!#(B
$B!U(B
$B$o$6$o$6%l%:%S%"%s$N1?1D$9$k%5%$%H$N7G<(HD$G!V$\$/$N$+$s$,$($?!"$I$&$;$$$"$$$7$c$r$5$Y$D$7$F$$$$$j$f$&!W$r3+DD$7$?$,$kI49g%*%?$N3'$5$^$X(B ($B$_$d$-$AF|5-(B, 10/11)
$B!U(B
$B!X(BGlee$B!Y%7!<%:%s(B2$B$K!"%i%H%,!<%9Bg3X@8$N<+;&;v7o$r$b$H$K$7$?%(%T%=!<%I$,EP>l(B ($B$_$d$-$AF|5-(B, 10/20)
$B!U(B
$B!V(BYuri$B$O%l%:%S%"%s!&%"%$%G%s%F%#%F%#!
($B$_$d$-$AF|5-(B, 10/21)
$B$=$&8@$($PF|K\$NI49g$b$N$C$F!"=wF1;N$GNx$r$7$?$j%G!<%H$7$?$j%-%9$7$?$j!">l9g$K$h$C$F$O%;%C%/%9$^$G$7$F$$$F$b!"$=$3$K!V%l%:%S%"%s!W$H$$$&35G0$O$a$C$?$K;}$A9~$^$l$J$$$s$G$9$h$M!#$`$7$m<+J,$,%l%:%S%"%s$@$H$$$&H/A[$9$i$J$$%-%c%i%/%?$,$[$H$s$I$J$s$8$c$J$$$+$7$i!#$"$?$7$O!X%W%j%F%#!&%?%U!Y!J%l%S%e!lLL$,Bg9%$-$J$N$G$9$,!"$=$l$O7k6I!"$=$3$^$G$O$C$-$j$7$?%l%:%S%"%s!&%"%$%G%s%F%#%F%#!<$r;}$C$F$$$k%-%c%i$H$$$&$N$,$a$C$?$K$$$J$$!J%<%m$G$O$J$$$K$7$F$b!K$+$i$@$H;W$$;j$j$^$7$?!#$@$+$i$3$=!"$J$j$j$s$N$"$NBf;l$N;W$$@Z$j$N$h$5$K46F0$9$k$o$1$G!#:#$5$i$J$,$i$=$N$3$H$K5$$E$+$5$l!"L\$+$i%&%m%3$,Mn$A$k;W$$$G$7$?!#(B
$B!U(B
Trojan.Zbot.B!inf $B$G$N(B Crypto API $B$N;H$o$lJ}(B
(Symantec, 10/18)
$B!U(B
$B;R$I$b$N0BA4BP:v!A%0%j!<$,BP:v6/2=!"GX7J$K%3%_%e%K%F%#%5%$%H$N4m81(B
(so-net $B%;%-%e%j%F%#DL?.(B, 10/21)
$B!U(B
$B!V;`3$J8=q!W$,%*%s%i%$%s$GA4J88x3+$X!"(BGoogle$B$H%$%9%i%(%k$,Ds7H(B
(gigazine, 10/20)
$B!U(B
$B%l%"%"!<%9J}LL(B
$B!U(B
$BC/$bHcH=$7$J$$!V
(JBpress, 5/7)
$B!!$"$k<+F0]$K;D$C$F$$$k!#!V7WB,3XE*$K8@$C$F$b!"$b$O$d!J(B10.15$B4p=`$N!K%+%?%m%0CM$OA4$/0UL#$r$J$5$J$$!W(B
$B%a%G%#%"!"%"%J%j%9%H$O$J$<8+$F8+$L%U%j$J$N$+(B
$B!!$3$&$7$?>u67$,$J$<%a%G%#%"$GJsF;$5$l$J$$$N$+!#!Ve$2$?$/$F$be$2$i$l$J$$!W!JK?%F%l%S6IJsF;44It!K$H$$$&@<$O>/$J$/$J$$!#FC$K9-9p<}F~$NMn$A9~$_$,7c$7$$%F%l%S!"?7J9$O!"=EMW%/%i%$%"%s%H$G$"$k<+F0
$B!!$^$?%^%9%4%_$+!D!D!#%j%"%k$J%G!<%?$,CN$j$?$$?M$O!"(Be$BG3Hq(B
$B$,$$$$$=$&$G$9!#(B
$B!U(B
$B%7%'!<%k%,%9$,JQ$($k;q8;$N%Q%o!<%P%i%s%9(B
(slashdot.jp, 10/20)$B!#4XO"(B:
$B@$3&$rFI$`!'@$3&JQ$($k%7%'!<%k%,%9!J$=$N#1!K!!L2$l$kJu!"5;=Q3W?7$G:N7!(B
($BKhF|(B, 10/18)
$B@$3&$rFI$`!'@$3&JQ$($k%7%'!<%k%,%9!J$=$N#2;_!K!!!V%7%'!<%k3WL?!W;T>lAS<:$N4m5!(B ($BKhF|(B, 10/18)
$B!Z%/%l%`%j%s7P:Q3X![MI$l$kE7A3%,%9Bg9q%m%7%"!!JF9qH/!V%7%'!<%k%,%93WL?!W$N>W7b(B
($B;:7P(B MSN, 2/25)
$B;0I)>&;v!"2C#P#W#E$N%7%'!<%k%,%93+H/7W2h$K;22C(B
($B%m%$%?!<(B, 8/24)
$B%7%'!<%k%,%9$O@$3&$rJQ$($k(B (Financial Times / JBpress, 5/26)
$B!U(B
$B2$=#$G$NIT42MF@/:v$X$N798~$r7Y9p!';vL3AmD9(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/20)
$B!U(B
$B522n$H@o$&$K$OEZCO$N;HMQ@)8B$b=EMW(B ($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/19)
$B!U(B
$B%"%U%j%+!&%5%X%kCO0h$N?)NHLdBj$K$D$$$F:,K\E*$JBP:v$r(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/18)
$B!U(B
CSIRT$BJ3F.5-(B $BBh(B12$B2s!!(BNRI$B%;%-%e%"%F%/%N%m%8!<%:$N!V(BNCSIRT$B!W!=!=9q$r1[$($?967b$KAGAa$/BP1~!$%3%_%e%K%F%#!<$N=EMW@-$r
($BF|7P(B IT Pro, 10/18)
$B!U(B
$B#2$A$c$s$M$k$K>pJs3+<(L?Na!!F|@6#C#M;#1F=d$k=q$-9~$_(B
(asahi.com, 10/20)
$B#C#M@=:n2qpJs$N3+<($r5a$a$k2>=hJ,$r?=@A$7$F$$$?$3$H$,$o$+$C$?!#El5~CO:[!JEOJUE/:[H=41!K$O#1#9F|!"$$$:$l$N?=@A$bG'$a$k2>=hJ,7hDj$r$7$?!#(B
$B!U(B
$BEl3$CO?L$G?744@~!&ElL>9bB.J,CG$N62$l!!CO?LK\ItH/I=(B
(asahi.com, 10/20)
$B!U(B
20102010 event
(Dev-Team Blog, 10/20)
We$B!G(Bre pleased to release PwnageTool 4.1 for Mac OS X (free of charge, blog ads, and donation requests $B!=(B as always!). Today$B!G(Bs big new addition to the jailbreak family is AppleTV 2G, which was first shown jailbroken in its release week!
$B!U(B
$B%X%k%a%C%H$NBe$o$j$K$J$k%(%"%P%C%0(B($BF02h(B)
(WIRED VISION, 10/21)
$B$5$F!"$J$<%X%k%a%C%H$G$J$/$3$N%(%"%P%C%0$J$N$@$m$&$+!#$9$0;W$$$D$/M}M3$O%U%!%C%7%g%s@-$@!#6_$N%G%6%$%s$O$$$m$$$m$HJQ$($i$l$k$7!"%X%"%9%?%$%k$b%a%C%H$G$Z$A$c$s$3$K$J$i$J$$!#(B
$B!U(B
$B%0!<%0%k!"%M%C%H%o!<%/4IM}
(ComputerWorld.jp, 10/18)
$B!U(B
Facebook Connect$B$r;&$9(BFacebook Disconnect$B$r(BGoogle$B$N5;=Q
(techcrunch, 10/20)
$B!U(B
$B4F::K!?M8rBe@)!)(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 10/17)
$B!U(B
$B%^%+%U%#!
($BF|7P(B IT Pro, 10/21)$B!#(BMcAfee Encrypted USB version1.3$B!#(B
$B%&%$%k%9Dj5A%U%!%$%k$OL5=~$G99?7$9$k!#(B
$B!U(B
McAfee$B (virtualization.info, 10/19)
$B!U(B
Virtual Computer$B
(virtualization.info, 10/20)
$BN>
$B!U(B
Hyper-V$B$O4|BT$r2<2s$C$F$$$k$H$9$k(BGartner$B
(virtualization.info, 10/21)
$B!!(BHyper-V $B$D$J$,$j(B: Microsoft$B (virtualization.info, 10/20)
$B!U(B
$BBg:eBg3XK!Ab2q(B
($BCEJ[8n;N$N;vL3<<(B, 10/21)
Q4$B!!9g3J
A4$B!!6aG/$NBgNL9g3Ju67$O!"$3$l$^$G!"F|K\$G7P83$7$??M$O$$$^$;$s!#(B
$B!!!!
$B!!!!;d$K$bJ,$+$j$^$;$s!#(B
$B!U(B
$BLZ8l!'H?F|%G%b!"@5BN8+$($?!a6b;R=(IR(B
($BKhF|(B, 10/21)
$B!!%M%C%H2hA|$G2#CGKk$NJ8;z$,FI$a$k!#Bh#1Ns$O!V9qCQG|G=K:!!L1B2Ev<+6/!W!J9qCQK:$k$J$+$l!#L1B2<+6/$;$h!K(B
$B!!Bh#2Ns$,!V<}2sN05e!!2rJ|2-Fl!W!JN05e$r2sI|$;$h!#2-Fl$r2rJ|$;$h!K(B
$B!!Bh#3Ns$,!VDq@)F|2_!*!W!JF|K\@=IJ%\%$%3%C%H!*!K(B
$B!!$3$l$,@5BN$G$"$k!##2HVL\$NN05e2-Fl2sI|$O!">U2p@P$N1eNn!J$*$s$j$g$&!K$N@<$G$"$k!#(B ($BCfN,(B) $B6&;:E^$NJ]U2p@P$N1eNn$,>h$j0\$j!"%H%&>.J?O)@~$K$+$_$D$$$F$$$k!#K\Ev$K?<9o$JE^FbO)@~F.Ah$G$"$k!#(B
$B!!4XO"(B:
$B!U(B
$B9bCNGr%P%$QM:a;v7o!":F?3@A5aDs=P(B
$B!U(B
$B!V%O%C%T!<%P!<%9%G!<%H%%!<%f!
(gigazine, 10/19)$B!#$3$s$J$N$KCx:n8"G'$a$k$s$@!D!D!#(B
$B!U(B
$B%"%K%a1G2h#10L$K!V%k%Q%s;0@$!W!!%-%M%^=\Js%Y%9%H%F%s(B
(asahi.com, 10/21)$B!#!V%k%Q%s;0@$!!%+%j%*%9%H%m$N>k!W!#$&!<$s!D!D!#3N$+$K7f:n$J$N$@$1$I!"$3$l$r(B Best 1 $B$K$7$A$c$&$N$O@5D>$I$&$h!#(B
$B!V@iG/=wM%!W$,(B best 10 $B$KF~$C$F$J$$$N$OL@$i$+$K$*$+$7$$$7!#(B
$B!VI>O@2H$dJ82=?MAm@*#6#7?M!W$,BLL\$9$.$k!#(B
$B$*A0$i$A$c$s$H4Q$F$+$i8l$C$F$k$N$+(B?
$B!!%+%j>k$K$D$$$F$O!"!V(BBS$B%"%K%aLkOC(B Vol.01 $B%k%Q%s;0@$!!%+%j%*%9%H%m$N>k(B$B!W$,I,FI=q@R!#(B
$BFI$s$G$+$i8l$l!#$$$d!"$d$C$Q$j7f:n$@$1$I$J!#(B
$B!U(B
$Bl$O!D!)(B
(cinemacafe / livedoor, 10/21)$B!#4X780;V;a(B)$B!#JQ$J%b%N$D$/$C$?$i@dBP5v$5$s$+$i$J(B! $B$C$F46$8!#(B
$B!U(B
$B3K$N6<0R$rIA$$$?OCBj:n;n
(MOVIE Collection / livedoor, 10/21)$B!#1G2h!X%+%&%s%H%@%&%s(BZERO$B!Y!#(B
$BA086Bg?C!";n
$B!U(B
$B#N#F#L$N%9!<%Q!<%9%?!<$,%"%U%,%s$G@o;`$7$?N"$K(B ($B%Y%$%(%j%":_=;D.;3CR9@%"%a%j%+F|5-(B, 10/17)$B!#1G2h!X%F%#%k%^%s!&%9%H!<%j!
$B!U(B
$BMxMQpJsN.=P!!(B
$B2,:j;T?^=q4[!"860x$O$^$?$b;0I)EE5!7O%=%U%H(B
($BF|7P(B IT Pro, 10/21)$B!#F|7P%3%s%T%e!<%?(B 2010.10.13 $B$N:FO?!#(B
$B!!$G!"$=$N8e!"$5$i$K=P$^$7$?$h!"$H!#(B
$B!U(B
$B4Z9q9q:]%5!<%-%C%H:G?7>u67$r%m!<%?%9%l!<%7%s%0$i$,Js9p!"%l!<%9$O$$$h$$$h:#=5Kv3+:E(B
(gigazine, 10/20)$B!#K\Mh$"$k$Y$-?e=`$KC#$7$F$$$J$$$3$H$OL@$i$+$G$9$,!"(B
$B$$$d$[$s$H!"2?;v$b$J$/=*N;$7$F$/$l$k$3$H$r5'$j$^$9!#(B
$B!!(BSleipnir 2.9.5 $BEP>l!#!V(BDLL $B%U%!%$%kFI$_9~$_$K4X$9$k@H
2010.10.22 $BDI5-(B:
$B!!(BJVN $B$+$i$b=P$^$7$?(B:
$B!!(BGrani $B$K$bF1$8LdBj$,$"$j!"(BGrani 4.4 $B$G=$@5$5$l$F$$$^$9!#(B
$B!!(BApsaly
3.74 $B$G=$@5$5$l$F$$$k$=$&$G$9!#4XO"(B: $B@H$B!#(B
$B!!(BTeraPad
1.00 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B
Oracle Java SE and Java for Business Critical Patch Update Advisory - October 2010
$B!!(BMac OS X 10.6 $BMQ(B Java $B$b(B Java SE 6 Update 22 $B$K$J$j$^$7$?!#(B
Mac OS X 10.5 $B$K$O(B Java SE 5.0 Update 26 $B$,MQ0U$5$l$^$7$?!#(B
(Java SE 5.0 Update 26 $B$O!"$"$k0UL#!"5.=E$J$h$&$J!D!D(B)
$B!!4XO"(B: In other Apple news... Java updates
(Sophos, 2010.10.20)
$B!U(B
$B$d$8$&$^%_%K%l%S%e!
($B2HEE(B Watch, 10/20)$B!#:rF|;`$K$=$&$K$J$C$?$P$+$j$J$N$G!"$9$+$5$:H/Cm$7$?!#(B
$B!U(B
4KB $B%;%/%?!
(IBM, 4/27)$B!#(B4KB $B%;%/%?!<;~Be$G$9$+$i!#(B
$B!VE,@Z$J%Q!<%F%#%7%g%s$N0LCV9g$o$;!W$r9T$o$J$$$H!"%U%!%$%k%7%9%F%`$K$h$C$F$O=EBg$J@-G=Nt2=$,H/@8$9$k$_$?$$!#(B
$B!!4XO"(B: Western Digital$B!"(B3TB$B$N(BCaviar Green$B$r=P2Y3+;O(B
(PC Watch, 10/20)$B!"(B
$B!Z(BWD$B![(BWD$B@=(BHDD$BM'$N2q(B EARS$B@lMQ(B 1$B%;%/%?L\!Z(BAFT$B![(B (2ch.net)
$B!U(B
$B9q:]1'Ch%9%F!<%7%g%s!J(BISS$B!K$N%Z%$%m!<%I0BA4?3::8"8B$N(BNASA$B$+$i$N0Q>y$K$D$$$F(B
(JAXA, 10/20)$B!#(BNASA $B$HF1Ey$HG'$a$i$l$?7k2L!#(B
$B!U(B
Reported Attack Site! - Security Tool's Latest Trick
(F-Secure blog, 10/20)$B!#L\$N$D$1$I$3$m$,$&$^$$$J$"!#(B
$B;W$o$:!V:BI[CD(B1$BKg!W$H8@$$$?$/$J$C$F$7$^$&!#(B
$B$3$&$$$&967b$,9T$o$l$k$/$i$$!"(BFirefox $B$O$U$D$&$N%V%i%&%6$J$o$1$G$9$M!#(B
2010.10.21 $BDI5-(B:
$B!!F|K\8lHG(B: $BJs9p$5$l$?967b%5%$%H!*(B - $B%;%-%e%j%F%#%D!<%k$N:G?7$N%H%j%C%/(B
($B%(%U%;%-%e%"%V%m%0(B, 10/20)
$B!U(B
Chromium$B!$(BPorts Collection$B$KEP>l(B
(FreeBSD Daily Topics, 10/19)
$B!U(B
$B@$3&DL2_@oAh!"GT
($BF|7P%S%8%M%9(B, 10/18)
$B!!(BKaspersky USA $B$,%O%/$i$l$F!"(BProduct Downloads > KIS > 2011 > English(USA/Canada) $B$+$i!"$K$;%"%s%A%&%$%k%9%5%$%H$KHt$P$5$l$F$$$?7o!#4XO"(B:
$B!!(BApache httpd 2.2.16 2.2.17 $BEP>l!#(B
$B!!$3$l$K$"$o$;$F$+!"(BApache 2.0.64 $B$H(B APR-util 0.9.19 $B$bEP>l$7$F$$$^$9!#(B
$B$I$A$i$K$b%;%-%e%j%F%#=$@5$,4^$^$l$F$$$^$9!#(B
$B!!(BGoogle Chrome 7.0.517.41 $BEP>l!#(B10 $B7o$N7g4Y$,=$@5$5$l$F$$$k!#(B
$B!!=P$F$^$9!#(B
2010.10.22 $BDI5-(B:
$B!!(BSeaMonkey 2.0.9
$B$b=P$F$$$^$9!#(Btvb19131 $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BF|Cf!V@m3UL)Ls!W$"$C$?!!(B
$B%9%/!<%W!!@/<#
(AERA, 10/17)$B!"(B
Japan's secret foreign policy
(foreignpolicy.com, 10/18)
$B!U(B
$B:G6a$N(BDNSSEC$B$NF08~(B
(NetAgent, 10/19)
$B!U(B
$B$=$N(BApache$B$N%b%8%e!<%k$OK\J*$G$9$+!)(B
($B%(%U%;%-%e%"%V%m%0(B, 10/19)$B!#$$$h$$$h(B file integrity check $BI,?\;~Be$KFMF~$+!#(B
$B!U(B
$BG'CN>I$r<#$;!*(B
(NHK $B%9%Z%7%c%k(B, 10/31 $BJ|AwM=Dj(B)
$B!U(B
$B!K(B
(NHK $B%9%Z%7%c%k(B, 11/7 $BJ|AwM=Dj(B)
$B!U(B
$B9V1iM=9p(B3$BBj(B
(ockeghem($BFA4]9@(B)$B$NF|5-(B, 10/18)$B!#(B
$B$H$$$&$o$1$G!"(B@random $B$JJY6/2q(B$B!";22C
$B!U(B
FreeBSD 8.2-RELEASE$B$H(B7.4-RELEASE$B!$(B2011$BG/(B1$B7nKv%j%j!<%9M=Dj(B
(FreeBSD Daily Topics, 10/18)$B!#(B7 $B7ONs$O(B 7.4 $B$G=*N;$NLOMM!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#BP:v$r<+F02=$9$kI8=`;EMM(B"SCAP"$B%;%_%J!<3+:E$N$*CN$i$;(B
$B!A(BCVSS$B%O%s%:%*%sJT!A(B
(IPA, 10/19)$B!#(B2010.11.02 / 11.22$B!"El5~ETJ85~6h!"L5NA!#(B11.02 $B$N2s$NJg=8$,3+;O$5$l$F$$$k!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#0B?4AjCLAk8}$r3+@_(B
$B!A>pJs%;%-%e%j%F%#4XO"$NAjCL$K0l85E*$KBP1~$9$kAk8}!A(B
(IPA, 10/19)$B!#3F
$B!U(B
$B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 10.5 Critical Patch $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 10/19)$B!#%U%!%$%"%&%)!<%k5!G=$,%a%b%j%j!<%/$7$F$$$?$=$&$G!#(B
$B!U(B
Java$B$N@H
(ITmedia, 10/19)$B!"(B
Have you checked the Java?
(Microsoft Malware Protection Center, 10/18)
$B!U(B
AKARI 1.0.1 $B$r%j%j!<%9$7$^$7$?!#(B
($B7'G-$5$/$i$N%V%m%0(B, 10/18)
$B!U(B
$B%Y%9%H%;%i!<$N!V$b$7%I%i(B($B$b$79b9;Ln5e$N=w;R%^%M!<%8%c!<$,%I%i%C%+!<$N!X%^%M%8%a%s%H!Y$rFI$s$@$i(B)$B!W%"%K%a2=7hDj(B
(gigazine, 10/18)$B!#C1$K1GA|$K$7$A$c$&$H!"$J$s$H$$$&$3$H$O$J$$%9%]%3%sOC$K$J$C$A$c$&$h$&$J5$$,!#HVAH$N:G8e$K!"%_%K%3!<%J!
$B!!$h$/$h$/8+$k$H(B NHK $B$8$c$s!D!D!#(B
$B!!$3$l$N7o(B:
$B!!$3$&$$$&OC$@$=$&$G(B:
$B:#2sH/3P$7$?0lO"$N%"!<%+%$%V%=%U%H$N@H]$H$J$k>l9g$,B?$$$N$G$9$,!"(BEXE$B%U%!%$%k$K$D$$$F$bF1MM$NLdBj$,H/@8$9$k$N$GCm0U$,I,MW$H$5$l$^$9!#(B
($BCfN,(B)
Lhaplus$B$H(BLhasa$B$O:#2s$N=$@5$G!"(Bexplorer.exe$B$r%U%k%Q%9$G5/F0$9$k$h$&$KJQ99$5$l$^$7$?(B(Lhaplus$B$K$OIT@5$J(BDLL$B$r%m!<%I$7$F$7$^$&LdBj$b$"$j$^$7$?$,!"$=$l$K$D$$$F$b=$@5$5$l$F$$$^$9(B)$B!#$^$?(BXacRett$B$O!"%+%l%s%H%G%#%l%/%H%j$r%$%s%9%H!<%k%U%)%k%@$K@_Dj$7$F$+$i(BWinExec$B$r8F$S=P$9$h$&$K=$@5$5$l$^$7$?!#(B
($BCfN,(B)
$B$A$J$_$K$3$N$h$&$KIT@5$J(BEXE$B$rl9g$H$O0[$J$j!"%^%$%/%m%=%U%H$,2sHr:v$N0l$D$H$7$FDs6!$7$F$$$k!V(BCWDIllegalInDllSearch$B!W$N@_Dj(B[9]$B$G$O2sHr$G$-$^$;$s$N$GCm0U$,I,MW$G$9!#(B
$B!!4XO"(B:
2010.10.20 $BDI5-(B:
$B!!$D$E$-$C$]$$!#(B
Microsoft 2010 $BG/(B 10 $B7n$N%;%-%e%j%F%#>pJs(B
-
MS10-071 - $B6[5^(B:
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (2360131)
-
$B!!(BIE 6 / 7 / 8 $B$K(B 10 $B8D$N7g4Y!#(B
$B%*!<%H%3%s%W%j!<%H$N>pJsO3$($$$N@HCVE-2010-0808
Windows XP / Vista $B>e$N(B IE 6 / 7 $B$N7g4Y!#(B
$B!V%*!<%H%3%s%W%j!<%H5!G=$,M-8z$K$5$l$F$$$?>l9g!"%U%)!<%`(B $B%U%#!<%k%I$KF~NO$5$l$?FbMF$r%-%c%W%A%c$9$k2DG=@-$,$"$j$^$9!W(B
HTML $B$N%5%K%?%$%:$N@HCVE-2010-3243
IE 8 $B$N(B toStaticHTML API $B$N7g4Y!"(BXSS $B$,H/@8!#!V%f!<%6!<$N%;%-%e%j%F%#(B $B%3%s%F%-%9%H$G(B Web $B%5%$%H$KBP$7%9%/%j%W%H$,
HTML $B$N%5%K%?%$%:$N@HCVE-2010-3324
IE 8 $B$N(B toStaticHTML API $B$N7g4Y!"(BXSS $B$,H/@8!#!V%f!<%6!<$N%;%-%e%j%F%#(B $B%3%s%F%-%9%H$G(B Web $B%5%$%H$KBP$7%9%/%j%W%H$,
CSS $BFCpJsO3$($$$N@HCVE-2010-3325
IE 6 / 7 / 8 $B$N7g4Y!#!V(BInternet Explorer $B$,(B CSS $B$NFC
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3326
IE 6 $B$N7g4Y!#96N,(B Web $B%Z!<%8$K$h$jG$0U$N%3!<%I$,
$B%"%s%+!pJsO3$($$$N@HCVE-2010-3327
IE 6 / 7 / 8 $B$N7g4Y!#!V:o=|:Q$_$N>pJs$,(B HTML $B%3%s%F%s%D$K;D$k2DG=@-$,$"$j$^$9!W(B
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3328
IE 6 / 7 / 8 $B$N7g4Y!#96N,(B Web $B%Z!<%8$K$h$jG$0U$N%3!<%I$,
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3329
IE 7 / 8 $B$N7g4Y!#(BHtmlDlgHelper Class COM $B%*%V%8%'%/%H$K7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$K$h$jG$0U$N%3!<%I$,
$B%/%m%9(B $B%I%a%$%s$N>pJsO3$($$$N@HCVE-2010-3330
IE 6 / 7 / 8 $B$N7g4Y!#!V(BInternet Explorer $B$N%;%-%e%j%F%#(B $B%>!<%s$^$?$OJL$N%I%a%$%s$+$i%3%s%F%s%D$r1\Mw$9$k2DG=@-$,$"$j$^$9!W!#(BExploitability Index: 3
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3331
IE 6 / 7 / 8 $B$N7g4Y!#96N,(B Word $B%I%-%e%a%s%H$r3+$-!"JD$8$k$HG$0U$N%3!<%I$,
$B!!(BHotfix $B$K4^$^$l$kHs%;%-%e%j%F%#$J=$@5$O$3$A$i(B:
KB 2360131
-
MS10-072 - $B=EMW(B:
SafeHTML $B$N@HpJsO3$($$$,5/$3$k(B (2412048)
-
$B!!(BSharePoint Services 3.0$B!"(BSharePoint Foundation 2010$B!"(B
SharePoint Server 2007$B!"(BGroove Server 2010$B!"(BOffice Web Apps $B$K!">pJsO31L$K4X$9$k(B 2 $B$D$N7g4Y!#(BSafeHTML $B$K7g4Y$,$"$j!"(BXSS $B$,H/@8!"(Blocal user $B$N%3%s%F%-%9%H$G967b%9%/%j%W%H$,CVE-2010-3243 (Exploitability Index: 3)$B!"(B
CVE-2010-3324 (Exploitability Index: 3)
-
MS10-073 - $B=EMW(B:
Windows $B%+!<%M%k%b!<%I(B $B%I%i%$%P!<$N@H:3J$5$l$k(B (981957)
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(BWindows $B%+!<%M%k%b!<%I%I%i%$%P!<$K(B 3 $B$D$N7g4Y$,$"$j!"(Blocal user $B$K$h$k8"8B>e>:$,2DG=!#(B
Win32k $B$N;2>H%+%&%s%H$N@HCVE-2010-2549
Windows Vista / Server 2008 $B$N7g4Y!#(BExploitability Index: 3
Win32k $B$N%-!<%\!<%I$N%l%$%"%&%H$N@HCVE-2010-2743
Widnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$N7g4Y!#(BWidnows XP $B$O!V=EMW!W!"$=$NB>$O!VCm0U!W!#$3$N7g4Y$rMxMQ$9$k%^%k%&%'%"$,B8:_!#(BExploitability Index: 1
Win32k $B$N%&%#%s%I%&(B $B%/%i%9$N@HCVE-2010-2744
Widnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$N7g4Y!#(BExploitability Index: 1
-
MS10-074 - $B7Y9p(B:
Microsoft Foundation Classes $B$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(B
Microsoft Foundation Class (MFC) Library $B$K7g4Y$,$"$j!"(B
$B%"%W%j%1!<%7%g%s$K$*$$$F!"G$0U$N%3!<%I$,CVE-2010-3227$B!#(BExploitability Index: N/A
-
MS10-075 - $B6[5^(B:
Windows Media Player $B%M%C%H%o!<%/6&M-%5!<%S%9$N@H
-
$B!!(BWindows Vista / 7 $B$K7g4Y!#(BWindows Media Player $B%M%C%H%o!<%/6&M-%5!<%S%9$K$*$1$k(B RTSP $B%Q%1%C%H$N=hM}$K7g4Y$,$"$j!"96N,(B RTSP $B%Q%1%C%H$K$h$C$F(B remote $B$+$iG$0U$N%3!<%I$,CVE-2010-3225$B!#(BExploitability Index: 1
-
MS10-076 - $B6[5^(B:
Embedded OpenType $B%U%)%s%H(B $B%(%s%8%s$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(BEmbedded OpenType $B%U%)%s%H%(%s%8%s$K7g4Y$,$"$j!"96N,Kd$a9~$_%U%)%s%H$r4^$`(B Web $B%Z!<%8$K$h$C$FG$0U$N%3!<%I$,CVE-2010-1883$B!#(BExploitability Index: 1
-
MS10-077 - $B6[5^(B:
.NET Framework $B$N@H
-
$B!!(B.NET Framework 4.0 $B$K7g4Y!#(Bx64 / Itanium $B>e$N(B JIT $B%3%s%Q%$%i$K7g4Y$,$"$j!"G$0U$N%3!<%I$,
$B96N,(B XBAP (XAML Browser Application) $B$r4^$`!"96N,(B Web $B%Z!<%8$r1\Mw$9$k(B
$B96N,(B ASP.NET $B%"%W%j%1!<%7%g%s$r%"%C%W%m!<%I$5$l!"
$B$H$$$C$?967b$,9M$($i$l$k!#(B
CVE-2010-3228$B!#(BExploitability Index: 1
$B!!$3$N7g4Y$O(B 32bit $B4D6-$K$O1F6A$7$J$$!#(B
$B!!(BHotfix $BE,MQ$K4X$9$k4{CN$N;v9`$,(B KB 2160841
$B$K<($5$l$F$$$k!#(B
-
MS10-078 - $B=EMW(B:
OpenType $B%U%)%s%H(B (OTF) $B7A<0%I%i%$%P!<$N@H:3J$5$l$k(B (2279986)
-
$B!!(BWindows XP / Server 2003 $B$K7g4Y!#(B
OpenType $B%U%)%s%H(B (OTF) $B7A<0%I%i%$%P!<$K(B 2 $B$D$N7g4Y$,$"$j!"(B
local user $B$K$h$k8"8B>e>:$,2DG=!#(B
$B96N,(B OpenType $B%U%)%s%H$rKd$a9~$s$@(B Web $B%Z!<%8$r(B (IE $B$G$O$J$/(B) 3rd party $B@=(B Web $B%/%i%$%"%s%H$G3+$/$H967b$,@.N)$9$k!#(B
-
MS10-079 - $B=EMW(B:
Microsoft Word $B$N@H
-
$B!!(BWord 2002 / 2003 / 2007 / 2010$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/!"(BWord Viewer$B!"(BOffice Web Apps$B!"(BWord Web App $B$K(B 11 $B8D$N7g4Y!#BgH>$N7g4Y$O(B Word 2002 $B$H(B Office 2004 for Mac $B$K$7$+1F6A$7$J$$!#(B
Word $B$N=i4|2=$5$l$F$$$J$$%]%$%s%?!<$N@HCVE-2010-2747
Exploitability Index: 2
Word $B$N6-3&%A%'%C%/$N@HCVE-2010-2748
Exploitability Index: 2
Word $B$N%$%s%G%C%/%9$N@HCVE-2010-2750
Exploitability Index: 2
Word $B$N%9%?%C%/(B $B%*!<%P!<%U%m!<$N@HCVE-2010-3214
Word 2002 / 2003 / 2007 / 2010$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/!"(BWord Viewer$B!"(BOffice Web Apps$B!"(BWord Web App $B$N7g4Y!#(BExploitability Index: 1
Word $B$NLa$jCM$N@HCVE-2010-3215
Exploitability Index: 2
Word $B$N%V%C%/%^!<%/$N@HCVE-2010-3216
Exploitability Index: 1
Word $B$N%]%$%s%?!<$N@HCVE-2010-3217
Word 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Word $B$N%R!<%W(B $B%*!<%P!<%U%m!<$N@HCVE-2010-3218
Word 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Word $B$N%$%s%G%C%/%9$N2r@O$N@HCVE-2010-3219
Word 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Word $B$N2r@O$N@HCVE-2010-3220
Exploitability Index: 2
Word $B$N2r@O$N@HCVE-2010-3221
Word 2002 / 2003$B!"(BOffice 2004 for Mac$B!"(BWord Viewer $B$N7g4Y!#(BExploitability Index: 2
-
MS10-080 - $B=EMW(B:
Microsoft Excel $B$N@H
-
$B!!(BExcel 2002 / 2003 / 2007$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BExcel Viewer$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/$K(B 13 $B8D$N7g4Y!#(B
Excel $B$N%l%3!<%I$N2r@O$N@0?t%*!<%P!<%U%m!<$N@HCVE-2010-3230
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Excel $B%l%3!<%I2r@O$N%a%b%jGKB;$N@HCVE-2010-3231
Excel 2002$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac $B$N7g4Y!#(BExploitability Index: 2
Excel $B$N%U%!%$%k7A<0$N2r@O$N@HCVE-2010-3232
Excel 2003 / 2007$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BExcel Viewer$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/$K7g4Y!#(BExcel 2002 $B$K$3$N7g4Y$O$J$$!#(BExploitability Index: 1
Lotus 1-2-3 $B$N%o!<%/%V%C%/$N2r@O$N@HCVE-2010-3233
Excel 2002 / 2003 $B$N7g4Y!#(BExploitability Index: 2
$B?t<0$N%5%V%7%9%F%`$N%a%b%jGKB;$N@HCVE-2010-3234
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 1
$B?t<0$N(B Biff $B$N%l%3!<%I$N@HCVE-2010-3235
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 1
$B6-3&30$NG[Ns$N@HCVE-2010-3236
Excel 2002$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac $B$N7g4Y!#(BExploitability Index: 1
$B%;%k$N7k9g$N%l%3!<%I(B $B%]%$%s%?!<$N@HCVE-2010-3237
Excel 2002$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 2
Negative Future Function $B$N@HCVE-2010-3238
Excel 2002 / 2003$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 1
$B$=$NB>$N6-3&30$N%l%3!<%I$N2r@O$N@HCVE-2010-3239
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 1
$B%j%"%k(B $B%?%$%`$N%G!<%?G[Ns$N%l%3!<%I$N@HCVE-2010-3240
Excel 2002 / 2007$B!"(BExcel Viewer$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/$N7g4Y!#(BExploitability Index: 2
$B2r@O$K$*$1$k6-3&30$N%a%b%j$N=q$-9~$_$N@HCVE-2010-3241
Excel 2002$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 2
$BHsCVE-2010-3242
Excel 2002$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 2
-
MS10-081 - $B=EMW(B:
Windows $B%3%b%s(B $B%3%s%H%m!<%k(B $B%i%$%V%i%j$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(BComctl32.dll $B$K7g4Y$,$"$j!"!V%5!<%I%Q!<%F%#$N%9%1!<%i%V%k(B $B%Y%/%?!<(B $B%0%i%U%#%C%/%9(B (SVG) $B%S%e!<%"!<$+$iEO$5$l$?%9%1!<%i%V%k(B $B%Y%/%?!<(B $B%0%i%U%#%C%/%9$r8F$S=P!W$9>l9g$K(B heap overflow $B$9$k7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$r3+$/$HG$0U$N%3!<%I$,CVE-2010-2746$B!#(BExploitability Index: 1
-
MS10-082 - $B=EMW(B:
Windows Media Player $B$N@H
-
$B!!(BWindows Media Player 9 $B!A(B 12 $B$K7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$r3+$/$HG$0U$N%3!<%I$,CVE-2010-2745$B!#(BExploitability Index: 1
-
MS10-083 - $B=EMW(B:
Windows $B%7%'%k$*$h$S%o!<%I%Q%C%I$N(B COM $B$N8!>Z$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#!V(BWindows $B%7%'%k$*$h$S%o!<%I%Q%C%I$,(B COM $B%*%V%8%'%/%H$N%$%s%9%?%s%92=$r8!>Z$9$kJ}K!!W$K7g4Y$,$"$j!"96N,%U%!%$%k$d96N,(B Web $B%Z!<%8$r3+$/$HG$0U$N%3!<%I$,CVE-2010-1263$B!#(BExploitability Index: 1
$B!!(BHotfix $B$NE,MQ$K:]$7$F!"(BWindows Search 4.0 $B$r%$%s%9%H!<%k$7$F$"$k4D6-$G$OCm0U$,I,MW$JLOMM(B: KB 2405882
-
MS10-084 - $B=EMW(B:
Windows $B%m!<%+%k(B $B%W%m%7!<%8%c!<(B $B%3!<%k$N@H:3J$5$l$k(B (2360937)
-
$B!!(BWindows XP / Server 2003 $B$N(B Remote Procedure Call Subsystem (RPCSS) $B$K7g4Y!#(B
RPCSS $B$K4^$^$l$k(B LRPC Server (Local RPC Server; RPC EndPoint Mapper) $B$H!"(B
LPC (Local Procedure Call) $B$H$N4V$N%]!<%H%a%C%;!<%8$N=hM}$K(B buffer overrun $B$9$k7g4Y$,$"$j!"(Blocal user $B$K$h$k8"8B>e>:(B (LocalSystem $BC%CVE-2010-3222$B!#(BExploitability Index: 1
-
MS10-085 - $B=EMW(B:
SChannel $B$N@H
-
$B!!(BWidnows Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(B
$B!V(BSChannel $B$,(B SSL/TLS $B%O%s%I%7%'%$%/Cf$N%W%m%H%3%kMW5a$r=hM}$9$kA0$NO@M}>uBV$N8!::$K<:GT!W$9$k$?$a!"96N,(B SSL/TLS $B%O%s%I%7%'%$%/$rAw?.$9$k$3$H$K$h$C$F(B DoS $B967b(B ($B%5!<%P!<1~EzDd;_(B) $B$,2DG=!#(BCVE-2010-3229$B!#(BExploitability Index: 3
-
MS10-086 - $B7Y9p(B:
Windows $B6&M-%/%i%9%?!<(B $B%G%#%9%/$N@H
-
$B!!(BWindows Server 2008 R2 $B$K7g4Y!#6&M-%U%'!<%k%*!<%P!<%/%i%9%?!<$H$7$F;HMQ$7$F$$$k>l9g$K!"!V4IM}Z$5$l$F$$$J$$%f!<%6!<(B (Everyone) $B$K%U%'!<%k%*!<%P!<(B $B%/%i%9%?!<(B $B%G%#%9%/$N4IM}MQ6&M-$X$NFI$_CVE-2010-3223
$B!!(Bhotfix $B$rE,MQ$7$?8e$G!"4{$K@_Dj$5$l$F$$$k%U%'!<%k%*!<%P!<%/%i%9%?!<%G%#%9%/$K$D$$$F$O!"(B
Everyone $B%U%k%3%s%H%m!<%k$r(B Administrators $B%U%k%3%s%H%m!<%k$KJQ99$9$k$3$H!#(B
$B!!(BWindows / Mac / Linux $BHG$N(B RealPlayer $B$K?7$?$J(B 7 $B
$B!U(B
MalwareURL
$B$r2?5$$J$/8+$F$_$k!#(B
$B$U$%$s(B yahoor7e.com/1mg/am.rar $B$M$'!D!D!#(B
$B2?5$$J$/(B proxy server $B$N(B log $B$r(B grep $B$7$F$_$k!D!D(B
133.83.X.X - - [18/Oct/2010:10:33:37 +0900] "GET http://www.yahoor7e.com/1rb/ar1.rar HTTP/1.0" 401 1326
$B!!(Borz
$B!U(B
$B$O$F$J%i%s%I!"3+;O$+$i(B2$B=54V$G=*N;(B
(slashdot.jp, 10/17)
$B!U(B
$B!VEl5~ET@D>/G/>rNc!W$N%Q%m%G%#1i7`$O!VH?
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 10/17)
$B!U(B
Facebook faces new privacy problems: top apps leak your data
(Sophos, 10/17)
$B!U(B
$BF|K\$X!'7P:Q$rN)$FD>$9$K$O<:GT$7$?5/6H2H$rB:=E$;$h(B
(techcrunch, 10/18)
$B!U(B
$B%&%'%V%5%$%H1?1D
(IPA, 10/18)$B!#(B2010.11.01 / 11.22$B!"El5~ETJ85~6h!"L5NA!#(B11.01 $B$N2s$NJg=8$,3+;O$5$l$F$$$k!#(B
$B!U(B
$B<"2l0e2JBg3X$N4IM}$9$k(BWeb$B%5%$%H$G2~$6$sHo32(B
(security.gs, 10/18)$B!#$3$l$G$9$+$M(B: http://www.zone-h.org/mirror/id/11889943
$B!U(B
$BHH:a=8CD$,(BMicrosoft$B$N%7%9%F%`$r>h$C
(ITmedia, 10/18)
$B!U(B
$B$b$s$8$e=*N;(B$B!#(B
$B%$%s%?!<%M%C%H$GFI$_2r$/(B!No.215$B!V$b$s$8$e$NO'?4MQAuCVMn2
(memo, 9/16) $B$N$D$E$-!#(B
$BNc$N%b%N!"JQ7A$7$F$R$C$+$+$C$F$$$kLOMM!#(B
$B!!J!0fHG$N$_$N;fLL$,B?$$$_$?$$$@$J$"!#(B
$B4XO"(B:
$B!U(B
$B!ZB.Js![(BKDDI$B$,DL>o$N2;@
(gigazine, 10/18)$B!"(B$B!ZB.Js![(BKDDI$B$N!V6XCG$N%"%W%j%1!<%7%g%s!W$O!V(BSkype$B!W$G$"$k$3$H$,H=L@!"=>Mh$h$j$bDc>CHqEENO$K(B (gigazine, 10/18)$B!#%k%S%3%s$rEO$l!#(B
$B!U(B
Announcing Adobe Reader X
(Adobe Reader blog, 10/18)$B!#%(%C%/%9$8$c$J$/$F%F%s$J$s$@$m$&$J$"!#(B
Reader X will be available for download next month and we want to give you a preview of the valuable new features you can expect.
$B!!Mh7n$K$OEP>l$9$k$=$&$G!#(B
$B!U(B
$B!H(BStranger Danger$B!I(B - Introducing SmartScreen Application Reputation
(IEBlog, 10/13)
$B!U(B
$B!V(BWarhammer Online($B%&%)!<%O%s%^!<(B $B%*%s%i%$%s(B)$B!W$K@x$`%^%k%&%'%"46@w$N4m81@-(B
(McAfee Labs Blog, 10/18)
$B!U(B
$B%X%jDFMn!'#64I$,#2%+7n$V$j$K9R6u6HL3:F3+(B
($BKhF|(B, 10/18)$B!#(BMH796$B!V$"$-$E$k!WDFMn;v8N$G$*$J$8$_$NBh#64I6h3$>eJ]0BK\It9-Eg9R6u4pCO$,9R6u6HL3:F3+!#(B
$B!U(B
$B%j%"%j%F%#$O$J$$$1$I!"6<0R$O3N$+$K$$$k$h(B
(@IT, 10/12)$B!#(BSSH $B%V%k!<%H%U%)!<%9$M$?!#(B
$B!U(B
$B!V/G/1!K=9T;v7o(B
(asahi.com, 10/18)
$B!U(B
$B%i%8%r%^%s(B $B!ZI|4)=q@R![(B
($BI|4)%I%C%H%3%`(B)$B!"(B
$B%i%8%r%^%s(B ($B%&%#%-%Z%G%#%"(B)$B!#$3$N@$$NCf$K!"$3$s$J$9$4$$$b$N$,$"$C$?$N$+!#(B
$B!U(B
2011$BG/=U$N2VJ4$O(B2010$BG/$N(B2$B!A(B10$BG\!"F|K\5$>]6(2qM=B,(B
($B2HEE(B Watch, 10/15)$B!#$0$O$!(B ($BEG7l(B)$B!#(B
$B!U(B
$BJ#@=8"?/32MF5?!'1G2hN.=PL\E*$G%@%&%s%m!<%I$NCK$rDIAw8!(B
($BKhF|(B, 10/16)$B!#7Y;!$O!"!V%"%C%W%m!<%I!W$9$k$?$a$K!V%@%&%s%m!<%I!W$7$?$iJ#@=8"?/32!"$H$$$&M}6~$r$3$$$?LOMM!#(B
$B!U(B
$B;K>e:G0-$N#N#Y3t2A5^Mn!"0z$-6b$OEj;q2q
(asahi.com, 10/2)
$B!U(B
PHP$B3+H/
(gihyo.jp, 9/29)$B!"(B
gihyo.jp$B$N(BRasmus$B$5$s%$%s%?%S%e!<$NJdB-(B
(yohgaki's blog, 10/3)$B!#(B
Rasmus$B!'3X=QE*$K=c?h$G$"$k$3$H$Ho$K8~$-9g$C$F$$$k$N$,(BPHP$B$N6/$_$H$$$($k$H;W$$$^$9!#7k2L!$LdBj$r4JC1$K2r7h$G$-$k(BPHP$B$,?M!9$K$H$C$FL%NOE*$K8+$($k$N$@$H;W$$$^$9!#;d$b(BPHP$B$KBP$9$kB?$/$NHcH=$K$OF10U$G$-$^$9!#(BPHP$B$K$OBt;3$N=9$$ItJ,$,$"$j$^$9$,!$$3$l$i$N=9$$ItJ,$O!VLdBj$r2r7h!W$9$k$3$H$rAK$_$^$;$s!#4X?t$N%Q%i%a!<%?$N=g=x$,5U$K$J$C$F$$$k>l9g$,$"$j$^$9$,!$$3$l$i$OCWL?E*$J>c32$G$O$"$j$^$;$s!#=g=x$,F1$8$G$J$$$3$H$KJ"$,N)$D$+$bCN$l$^$;$s$,!$H?BP$K$9$l$PLdBj$J$/F0:n$7$^$9!#3N$+$KH~$7$/$J$$$G$9$,!$@5$7$/F0$/$3$H$,=EMW$J$N$G$9!#$=$l$K!$2f!9$,2r7h$7$h$&$H$7$F$$$kLdBj$OH~$7$$LdBj$G$O$J$$$G$9$h$M!#H~$7$/$J$$LdBj$rH~$7$/$J$$%D!<%k$G2r7h$9$k$3$H$K2?$NLdBj$b$"$j$^$;$s!#H~$7$$%D!<%k$OH~$7$$LdBj$r2r7h$9$k$?$a$K$OHs>o$K8z2LE*$+$bCN$l$^$;$s$,!$B?$/$N>l9g$OI,MW$,$"$j$^$;$s!#$5$^$6$^$J%k!<%k$r:n$j!$%U%l!<%`%o!<%/$r;H$$!$%b%G%k$d%S%e!<$r;H$C$F2r7h$G$-$J$$LdBj$,$"$k$N$G$9!#(B
$B!!;W$$=P$7$?8@MU(B: $BK\J*$N%W%m%0%i%^!<$O%Q%9%+%k$r;H$o$J$$(B
$B!U(B
$B%&%#%-%j!<%/%9$X$N8%6b4XM?$N4k6H!"C(B
(CNN, 10/16)
$B!U(B
$B1x@w$5$l$?E%$NN.=P$K$h$k7r9/$X$N1F6AI>2A$N$?$a$K%O%s%,%j!<$K@lLg2H$rGI8/!'(BWHO
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/13)
$B!U(B
$B%=%^%j%"$H9g=09q$O;R$I$b$N8"Mx>rLs$KHc=Z$r(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/14)
$B!!9g=09q$O!"<+9qL1$N8"Mx$r>/$7$G$b6<$+$9>rLs$drLs$N2?$,5$$KF~$i$J$$$N$G$7$g$&$M!#(B
$B!!FC$K%*%P%^BgE}NN$O(B2008$BG/$NA*5s3hF0Cf$K!"9g=09q$OHc=Z$9$Y$7$HH/8@$7$F$$$?$N$K@.2L$,F@$i$l$F$$$^$;$s!#(B
$B!U(B
$B5m1V$rKPLG(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/15)
$B!U(B
Phishing URLs and XML Notifications
(Google Online Security Blog, 10/14)
$B!U(B
bit.ly$B$b4m$J$$!)(B $B!V%$%9%i%`K!$KH?$7$?!W(Bvb.ly$B%I%a%$%s$,GmC%$5$l$k(B
($B$D$d$F$6%K%e!<%9(B, 10/7)$B!"(B
$B%j%S%"$N4IM}2<$K$"$k(B.ly$B%I%a%$%s$NMxMQ$OHr$1$k$Y$-!)(B (YAMDAS$B8=99?7MzNr(B, 10/12)$B!"(B
NIC.LY statement regarding the decision to block vb.ly (NIC.LY)$B!#(B
.ly $B$O(B$B%+%@%U%#Bg:4(B$B$G$*$J$8$_$N%j%S%"!#(B
ccTLD $B$K$O$3$&$$$&%j%9%/$,$"$k$o$1$G$9!#(B
mcaf.ee $B$O%(%9%H%K%"!"(Bgoo.gl $B$O%0%j!<%s%i%s%I!#(B
$B!U(B
$B%U%i%s%9$N9b9;@8$dBg3X@8$O$J$<@/<#!&
(JANJAN blog, 10/13)
$B!U(B
$B@%8MFb3$86H/7z@_$rAK;_$;$h!!;21!5D0w2q4[$G$N=82q;22CJs9p(B
(JANJAN blog, 10/14)
$B!!:#7nCf=\$+$i!"L>8E20$GF|K\$r5DD99q$H$9$k@8J*B?MM@-2q5D!J#C#O#P#1#0!K$,3+:E$5$l$F$$$k$,!"F|K\$,5DD99q$H$7$F$U$5$o$7$$9q$G$"$k$N$+$O!"$3$NED%N1:$N86H/7z@_7W2h$r$_$k8B$j5?Ld$G$"$k!#@^$7$b#C#O#P#1#0$K8~$1$F!"4D6->J$,9qN)!&9qDj8x1`$r8+D>$7$?$H$3$m!"F13$0h$N;XDjCO0h$r3HD%$9$Y$-$HH/I=$7$?!#$=$s$J9qN)8x1`$N$I??$sCf$K4u>/$J@8J*$N@8B)$9$k3$$rKd$aN)$F86H/$r7z@_$7$h$&$H$$$&$N$@$+$i!"
$B!!4XO"(B: cop10$B$*$`$9$SB<3+Be4X(B)$B86H/$+$i$N(BSOS$B$KEz$($F?M$rAw$j=P$9!#(B
(JANJAN blog, 10/15)
$B!U(B
(SANS, 10/16)$B!#(B
L2 $B$X$N967b$N2r@b$H!"(B
$B8!=P%D!<%k$r<+J,$G$D$/$C$A$c$*$&OC!#(B
$B;H$&$N$O(B Python $B$H(B Scapy$B!#(B
$B!U(B
$B#2#0#1#0G/%N!<%Y%kJ?OB>^^3hF0$K$46(NO$r!*(B
($B>pJsN.DLB%?J7W2h(B $B%d%a5-$B!ZEl5~$N?M$,>/$J$$$>!A![#2#0#1#0G/%N!<%Y%kJ?OB>^^3hF0N.DLCf!*(B
($B>pJsN.DLB%?J7W2h(B $B%d%a5-%Z!<%8(B: Free Liu Xiaobo (gopetition.com)
$B!U(B
$B>.Bt5/AJ$O!"8!?3$,!V9qL1$N@UG$$K$*$$$F!"8x@5$J7:;v:[H=$NK!Dn$G9uGr$r$D$1$h$&$H$9$k@)EY!W$@$+$i(B
($B>pJsN.DLB%?J7W2h(B $B%d%a5-
$B!!$7$+$7!"
$B!!$D$^$j!"M-:aN(#9#8!s0J2<$N$b$N$G$b5/AJ$9$k$H$$$&J}8~<+BN$O4?7^$9$Y$-H=CG$@!#(B
$B2?EY$+=q$$$?$,!"5/AJ!aM-:a$H$$$&%$%a!<%8$,!"L5:a?dDj$rE0Dl$5$;$:!"Ho9p?M$K$H$C$FHs>o$KITMx1W$J@)EY!J0E9u:[H=!K$K$J$C$F$$$k$+$i$@!#(B
$B!!8!;!?3::2q$O!":#2s!"!V9qL1$N@UG$!W$K$*$$$F$J$9$N$@$H$$$&!#(B
$B!!L5:a$N2DG=@-$,0lDj0J>e$"$k?M$r5/AJ$9$k$3$H$r!V9qL1$N@UG$!W$K$*$$$F$J$9$H$$$&$3$H$O!"L5:a?dDj$,E0Dl$5$l$J$1$l$P$J$i$J$$$H$$$&$3$H$@!#Bg$$$K4?7^$7$?$$!#(B
$B!U(B
$B%9%Q%$%9%$!<%H!V(BPhone Creeper v0.95$B!W(B
($B%(%U%;%-%e%"%V%m%0(B, 10/15)
$B!U(B
Adobe Flash, The Spy in Your Computer ? Part 3
(ESET Threat blog, 10/15)$B!#(BLocal Shared Object ($B$$$o$f$k(B Flash $B%/%C%-!<(B) $B$NOC!#(B
$B!U(B
$B9q2H8xL30w$N<+;&JD#JL$KCN$j$?$$(B
($B2sEz$9$k5-
$B!U(B
$B$/$i
(J-CAST $B%K%e!<%9(B, 10/14)$B!"(B
$B#T#B#S!V#N#E#W#S#2#3%/%m%9!W$G$NJ|1G$K$D$$$F(B
($B$/$i%3!<%]%l!<%7%g%s(B, 10/13)$B!#(B
$B!U(B
$BGI8/K!2~@5Bg5M$a!!7PCDO"$hO+F/u$rJ9$1(B
($BEDCfN6:n%8%c!<%J%k(B, 10/15)$B!"(B
$BEr@u@?!&GI8/B
($BEDCfN6:n%8%c!<%J%k(B, 10/16)
$B!U(B
$BAjpJsN.=P!A(B7$B7n0J9_!"(B8$B7o$,L@$i$+$K(B
(so-net $B%;%-%e%j%F%#DL?.(B, 10/15)
$B!U(B
$BLBOG%a!<%k!'=P2q$$7O6HCHq&
(so-net $B%;%-%e%j%F%#DL?.(B, 10/15)
$B!U(B
AKARI $B%W%m%8%'%/%H;O$a$^$7$?!#(B
($B7'G-$5$/$i$N%V%m%0(B, 10/16)$B!"(B
AKARI $B$H$$$&L>A0$NM3Mh$K$D$$$F(B
($B7'G-$5$/$i$N%V%m%0(B, 10/16)$B!#$&$o$!!"?eL5EtN$$5$s$@$C$?$N$+!#(B
$B!U(B
$BI[@n;v7o!'5u56<+Gr6/MW$5$l$?!D:y0f$5$s$iAJ$(!!:F?38xH=(B
($BKhF|(B, 10/16)
$B!U(B
$B%Q%M%k%G%#%9%+%C%7%g%s!V2,:j;TN)?^=q4[;v7o$r2f!9$O$I$&B*$($k$Y$-$+!)!W(B
($BFI=q%N!<%H$N$D$b$j!)$J$D$l$E$lF|5-(B, 10/15)$B!#!V2q>l$K$$$?(BJPCERT$B$NJ}!W$O!"(B
$B$3$N(B tweet
$B$K$h$k$H2NBe$5$s$@$C$?LOMM!#(B
$B!U(B
$B!V3d$j;;!W$I$3$m$+!VB-$7;;!W$b4V0c$($k8!;!?3::2q;vL36I$N%F%-%H!<$5!#(B
($B%U%j!<%i%s%9%i%$%?!
$B!U(B
17$BG/$b$N:P7n$r7P$F40@.$7$?D6Bg:n!"@o4O%t%#%/%H%j!<$N$"$^$j$K$b@:L)$JD&9o(B
(gigazine, 10/15)$B!#(BHMS Victory $B$N!VD&9o!W!#(B
$BK\J*$N%t%#%/%H%j!<$+$io$K7x$/!"$3$ND&9o$r40@.$5$;$k$K$"$?$C$F!"H`<+?H$,A[A|$7$?$h$j$bD9$$;~4V$rMW$7$?$H(BBrennan$B;a$O=R$Y$F$$$^$9!#(B
$B!!2f$b%A%c%l%s%8$7$?$$(B! $B$H$$$&J}$O!"(B
$B$^$:$O(B
The Raw Material
(Victory Oak
Collection) $B$rF~
$B!U(B
$B8!:w$@$1$8$c$J$$!*(BGoogle$B$,@$4V$KCN$i$7$a$?$$#3$D$N=EMW$J?t;z(B
(techcrunch, 10/14)
$B!U(B
FSF$B!"%U%j!<%=%U%H%&%'%"$r:NMQ$9$k%O!<%I%&%'%"$NG'Dj%W%m%0%i%`$r%9%?!<%H(B
(sourceforge.jp, 10/15)
$B!U(B
$BBh(B6$B2s(B IPA $B>pJs%;%-%e%j%F%#I88l!&%]%9%?!<%3%s%/!<%k(B $B^:nIJ7hDj(B
$B!A(B $BBg>^$H$7$F!"I88lItLg$O!V%Q%9%o!<%I(B $B$\$/$@$1CN$C$F$k(B $B$?$+$i$b$N!W!"(B
$B%]%9%?!pJs(B $B%M%C%H$N3$$KN.=PCf!W$rA*Dj(B $B!A(B
(IPA, 10/15)
$B!U(B
$B6'0-%&%$%k%9!V(BZbot$B!W$,LT0R!"%D!<%k%-%C%H$G4JC1:n@.!!(B
$B%^%$%/%m%=%U%H$,Cm0U4-5/!"L5NA$N6n=|%D!<%k$G?7$?$KBP1~(B
($BF|7P(B IT Pro, 10/14)$B!#(BZeuS / Zbot $B$M$?!#(B
$B!U(B
PacSec$B$K6(;?$7$^$7$?!*(B
($B%(%U%;%-%e%"%V%m%0(B, 10/15)$B!#3ZE7$,(B PacSec 2010 $B$K6(;?$7$?$H$$$&OC!#3N$+$K!"(BSupporter Sponsors $B$NMs$K3ZE7$,!#(B
$B8D?ME*$K$O!"$3$l$,6=L#?<$$!#(B
"Malware migrating to Gaming Consoles : Embedded devices, an AntiVirus-free safe hideout for Malware" Dong-Joo Ha, AhnLab + Ki-Chan Ahn, Hanyang Univ
People have false sense of security for Console Gaming systems or Mobile Devices because they are not fully aware that malware can potentially bring the same devastating effects as that of a PC malware. These problems are not only restricted to Gaming consoles or Smartphones but also other various embedded devices. Also, most recent Gaming Consoles contain hardware to connect to the network so an almost ideal environment is provided for malware to survive and perform it's job. In this presentation, we will show how these innocent devices can misbehave and pose a serious threat (in particular Wii, NDS, iPhone, and Andriod), and show a demo of a malware in live action. We will also show some possible defenses to these kind of attacks.
$B!U(B
KDDI$B$,%9%^!<%H%U%)%s$K!V6XCG$N%"%W%j%1!<%7%g%s!W$H$7$F!V(BSkype$B!J%9%+%$%W!K!W$rEk:\$+!"(BNTT$B%I%3%b$b8!F$(B
(gigazine, 10/15)
$B!U(B
$B%&%$%k%946@w(BPC$B$N(BAdobe Reader$B%P!<%8%g%s$rD4::(B
($BF|7P(B IT Pro, 10/14)$B!#%d%i%l(B PC $B$rD4$Y$F$_$?$i(B Adobe Reader 7 $B$,$H$C$F$bB?$+$C$?!"$H$$$&OC!#(B
$B$H$C$H$H(B Adobe Reader 9.4 $B$K%"%C%W%0%l!<%I$7$^$;$&!#:#$J$i0lH/$G%$%s%9%H!<%k$G$-$k$7!#(B(Adobe Reader 9.3.4 $B$@$H!"$1$C$3$&BgJQ$@$C$?(B$B!#@5D>!"!V$@$a$@$3$j$c!W$H;W$C$?(B)
$B!!!D!D(B noritama.rice $B$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B)
$B$5$C$=$/7GBj$K$D$$$F$G$9$,!$2<5-(BAnonymous FTP$B%5%$%H$+$i%U%k%Q%C%1!<%8$r%@%&%s%m!<%I$9$k$3$H$,$G$-$^$9!%(B
$B99?7F|;~$K$h$l$P!$(B2010/08/14$B$K$O%"%C%W%m!<%I$5$l$F$$$?$h$&$G$9!%(B
ftp://ftp.adobe.com/pub/adobe/reader/win/9.x/9.3.4/jpn
$B:#2s$K8B$i$:!$(BAdobe$B$N%&%'%V%5%$%H$+$i$G$O%j%s%/$,E=$i$l$F$$$J$$$b$N$N!$(B
$B%b%N<+BN$O4{$K%"%C%W%m!<%I$5$l$F$$$k$H$$$C$?$3$H$,$h$/$"$j$^$9!%(B
$B!!$*$)!"$=$s$J>l=j$,$"$C$?$H$O!#$5$C$=$/%"%/%;%9$7$F$_$?!#(B
lftp ftp.adobe.com:/pub/adobe/reader/win/9.x> dir
total 48
drwxrwxr-x 35 filelib 62 4096 Nov 3 2008 9.0
drwxrwxr-x 36 filelib 62 4096 Jun 5 2009 9.1
drwxrwxr-x 3 filelib 62 4096 May 12 2009 9.1.1
drwxrwxr-x 3 filelib 62 4096 Jun 9 2009 9.1.2
drwxrwxr-x 3 filelib 62 4096 Jul 31 2009 9.1.3
drwxrwxr-x 37 filelib 62 4096 Jan 12 2010 9.2
drwxrwxr-x 37 filelib 62 4096 Feb 23 2010 9.3
drwxrwxr-x 3 filelib 62 4096 Feb 16 2010 9.3.1
drwxrwxr-x 6 filelib 62 4096 Sep 16 21:26 9.3.2
drwxrwxr-x 11 filelib 62 4096 Sep 16 21:26 9.3.3
drwxrwxr-x 8 filelib 62 4096 Aug 31 15:11 9.3.4
drwxrwxr-x 34 filelib 62 4096 Oct 5 16:02 9.4.0
lftp ftp.adobe.com:/pub/adobe/reader/win/9.x> dir 9.3.4/jpn
total 50436
-rwxrwxr-x 1 filelib 62 51539824 Aug 14 13:12 AdbeRdr934_ja_JP.exe
$B!!$*$)!"A4It%U%k%P!<%8%g%s$+$J!#(B
$B!U(B
$BHs@55,@Z
($BEDCfN6:n%8%c!<%J%k(B, 10/14)
$B!!9q:]%*%Z%l!<%?DLOC$NGQ;_$G:$$k$N$O!"A0CJ$G=R$Y$?$h$&$K3$30$G6[5^;~$,H/@8$7$?>l9g$@!=!=(B
$B!!Nc$($P?FB2$,%K%e!<%h!<%/$G8rDL;v8N$KAx$C$?$H$9$k!#$3$l$^$G$O%K%e!<%h!<%/$NIB1!L>$H=;=j$,J,$+$l$P!"(BKDDI$B$N%*%Z%l!<%?$,$D$J$$$G$/$l$F$$$?!#JF9q$NEEOC2q
$B!!$H$3$m$,(BKDDI$B$O(B10$B7n(B1$BF|$+$i!"$3$N!VAj8_1g=u%7%9%F%`!W$+$i30$l$?!#!V(B0057$B!W$KEEOC$r$+$1$k$HEEOCHV9f$rD4$Y$F$O$/$l$k$,!"%*%Z%l!<%?$,%$%s%?!<%M%C%H$G8!:w$9$k$N$G!"MxMQ
($BCfN,(B)
$B!!Aj8_%7%9%F%`$J$N$G!"309q$NMxMQ
$B!!F|K\$+$i(BKDDI$B$rDL$7$FMxMQ$G$-$F$$$?3$30$X$N%3%l%/%H%3!<%k!&%5!<%S%9$b(B9$B7n(B30$BF|$GGQ;_$H$J$C$?!#309q$NEEOC2q@\$+$1$F%3%l%/%H%3!<%k$rMj$_!"$7$P$i$/BT$?$J$1$l$P$J$i$J$$!#309q$NEEOC2q
$B!U(B
$B6?86J[8n;N5-
(Web Iwakami, 10/15)
$B!J6?86J[8n;N$NO@;]!K(B
$B!&5D;vO?8x3+$K4X$7$F!"?3::Jd=u0w!JJ[8n;N!K$NH/8@$O8x3+$9$k$N$,EvA3$G$O$J$$$+!#(B
$B!!>pJs8x3+K!$K$O!"4p=`$,=q$+$l$F$$$J$$!#?3::Jd=u0w$,K!N'$N@lLg2H$H$7$FLr3d$r2L$?$9(B
$B!!$3$H$K$h$C$F!"E,@5$5$,3NJ]$5$l$k$H$$$&9M$(J}$G$O$J$$$@$m$&$+!#(B
$B!!5D;vO?$,8x3+$5$l$:!"%A%'%C%/$b$5$l$J$$$H$J$k$H!"E,@5$5$rC4J]$G$-$J$$!#(B
$B!J]/0f65
$B!&0lHL?M$r4^$a$F6/@)5/AJ$5$l$k2DG=@-$,$"$k$H$$$&$3$H$K$J$k$H!"(B
$B!!$=$l$r7h$a$k8"8B$r;}$C$F$$$k8!;!?3::2q$N
$B!U(B
$B%+%s%V%j%"5\EB$G2,EDIp;K$,8@$$J|$C$?(B22$B$NL>8@(B
(ajickr blog, 10/15)
$B!U(B
$B%7%s%]%8%&%`!VFCA\A\::$N0G$HZ5r3+<(!W(B
($BF|J[O"(B)$B!#(B2010.10.19$B!"El5~ET@iBeED6h!"L5NA!#90CfJ[8n;N$d9>@n>R;R$5$s$NH/I=$b$"$k$h!#(B
$B!U(B
$BJ@pJs$NN.=P$K$D$$$F!J$*OM$S!K(B
($B;0I)EE5!%$%s%U%)%a!<%7%g%s%7%9%F%`%:(B, 10/15)
$B!!H/8+
$B!!$=$l$K$7$F$b$J$"!#;0I)EE5!%$%s%U%)%a!<%7%g%s%7%9%F%`%:$C$F!"!V;0I)EE5!!W$H$$$&%V%i%s%I$KF|!9E%$rEI$jB3$1$F$$$k$3$H$K5$$,$D$$$F$$$k$s$@$m$&$+!#(B
(typo fixed: @zusanzusan $BEN@q$J8&5f
$B!!4XO"(B:
$BK\F|$NL>8E20K\8E20HG$N5-;v!'2,:j;T$O(BMDIS$B$H$N7@LsBG$A@Z$j(B #librahack
(@kanda_daisuke $B?@ED!!Bg2p(B, 10/15)
$B?^=q4[%7%9%F%`!!6H
(asahi.com, 10/15)
http://mytown.asahi.com/aichi/news.php?k_id=24000001010150007 $B$3$NBP1~$O!D2,:j;T?^=q4[$O8D?M>pJs$K4X$9$k@UG$$N=j:_$r$I$&9M$($F$*$i$l$k$N$+!)(B #librahack
(@tetsutalow $B>e86!!E/B@O:(B, 10/15)
#librahack$B;a$NL>M@2sI|$K$D$$$F;T!&?^=q4[!&(BMDIS$B$N4X?4$,Gv$9$.$k!#8xL30w$H4k6H$N8@$$Lu$N$?$a$K8D?M$N<+M3$r?/32$7$F$=$l$C$-$j$+!#8D?M>pJs4IM}$d%=%U%H%&%'%"IJ (@nodeworks KINOSHITA, Kouji, 10/15)
$BCfLn6hN)?^=q4[$b>pJsN.=P(B (asahi.com, 10/15)
$BCfLn6h$N?^=q4[%7%9%F%`$K78$k8D?M>pJs$NN.=P$K$D$$$F(B
($BCfLn6hN)?^=q4[(B, 10/15)
$B!U(B
$B7HBS%5%$%H1\Mw;~$N=EMW$J$*CN$i$;(B
($B%=%U%H%P%s%/%b%P%$%k(B, 10/15)
$B0E9f2=DL?.$N:]$KJ@l9g$,$"$j$^$9$N$G!"0J2<$N$4BP1~$r$*4j$$$$$?$7$^$9!#(B
$B!!(B2011.02 $B0J9_!"(Bsecure.softbank.ne.jp $B$O2p:_$7$J$/$J$kLOMM!#(B
$B!U(B
$B85JF@/I\9b41!"0BA4$J%$%s%?!<%M%C%H!&%W%m%H%3%k3+H/$X$NEj;q$rB%$9!!(B
$B%;%-%e%j%F%#!&%F%/%N%m%8!<$KBP$9$k8&5f3+H/Ej;q$O5^L3(B
(ComputerWorld.jp, 10/14)$B!#%j%A%c!<%I!&(BA$B!&%/%i!<%/;a!"(BRSA Conference $B$K$F!#(B
$B!U(B
Creative Commons$B!"Cx:n8"4|8B$,@Z$l$?%Q%V%j%C%/%I%a%$%s8~$1$N!V(BPublic Domain Mark$B!W$r%m!<%s%A(B
(sourceforge.jp, 10/13)
$B!U(B
Panda Cloud Antivirus$B$,%&%)!<%k%9%H%j!<%H%8%c!<%J%k;o$N5;=Q3W?7%"%o!<%I:G=*?3::$G
(Panda Security Japan $B%*%U%#%7%c%k%V%m%0(B, 10/14)$B!#(B
the Innovation Awards (WSJ.com) $B$@$=$&$G!#(B
Network Security $BItLg!"A*$P$l$?$N$O(B Symantec$B!"Pivot $B$,
$B!U(B
"Stop 0x000000D1" error after you enable an iSCSI Initiator data digest setting that uses CRC or that uses checksum in Windows Server 2008 R2 or in Windows 7
(Microsoft KB 982674)$B!#(BHotfix $B$"$j$^$9!#(B
$B!U(B
A connection to a load-balancing Exchange mailbox from an Outlook client fails on a computer that is running Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2 (Microsoft KB 2408168)$B!#(BHotfix $B$"$j$^$9!#(Bclient $BB&$NLdBj$H$$$&$3$H$J$N$+$J!#(B
$B!U(B
You cannot open a scanned TIFF file by using a standard third-party imaging application in Windows 7 or in Windows Server 2008 R2
(Microsoft KB 2406635)$B!#(BHotfix $B$"$j$^$9!#(B
$B!U(B
$BBh(B5$B2sElKL>pJs%;%-%e%j%F%#JY6/2q(B$B!#(B
2010.11.13$B!"5\>k8)@gBf;T!"0lHL(B 1000 $B1_(B ($B3X@8L5NA(B)$B!#(B
$B!!$$$h$$$h$O$8$^$k$h(B!
JPRS$B$G$O!"(BJP$B%I%a%$%sL>%5!<%S%9$X$N(BDNSSEC$B$NF3F~$K@hN)$A!"(B2010$BG/(B10$B7n(B17$BF|$h$j(BJP$B%>!<%s$K$*$1$k(BDNSSEC$B=pL>(B($B0J2!W$H$7$^$9(B)$B$r3+;O$7$^$9!#(B
$B%P!<%8%g%s(B9.3$B0J9_$N(BBIND 9$B$d(BUnbound$B$J$I!"%-%c%C%7%e(BDNS$B%5!<%P!<$+$i$N(BDNS$BLd$$9g$o$;$K$*$$$F(BDO$B%S%C%H$,M-8z$K@_Dj$5$l$F$$$k>l9g$O!":#2s$N(BDNSSEC$B=pL>$K$h$C$F%-%c%C%7%e(BDNS$B%5!<%P!A08!>Z$rM-8z$K@_Dj$7$F$$$k!?$$$J$$$K$+$+$o$i$:!"(BJP DNS$B$+$i$N1~Ez$K(BDNSSEC$B4XO"$N>pJs$,DI2C$5$l$k$h$&$K$J$j$^$9!#(B
$B$3$l$K$h$j(BJP DNS$B$+$i$N(BDNS$B1~Ez%5%$%:$,A}Bg$7!"%-%c%C%7%e(BDNS$B%5!<%P!<$K$*$$$FJ];}$5$l$k>pJs$bA}Bg$7$^$9!#$=$N$?$a!"(BDNSSEC$B=pL>$N3+;O8e!"3F%-%c%C%7%e(BDNS$B%5!<%P!<$K$*$1$k%M%C%H%o!<%/$N;HMQ>u67$N3NG'$d!"(Bnamed$B$d(Bunbound$B$J$I$N%M!<%`%5!<%P!<%W%m%0%i%`$K$*$1$k%a%b%j;HMQ>u67$N3NG'$r
$B!!8=>u$G4{$K$+$D$+$D$@$H!"$A$g$C$H$"$l$+$b$7$l$^$;$s!#Cm0U$7$^$;$&!#(B
$B!!>C$7$?$O$:$,!"C$($F$J$$$=$&$G!#(B
$B:8$Ne$Kl$G$9$0>C$($?$N$O!"$3$N
$B!!@NJ9$$$?;w$?$h$&$JOC(B: $B%^%$%^%C%W$r:o=|$7$F$b!V$9$0!W$K$O>C$($J$$(B
($BMn8`Do;R$N%V%m%0(B, 2008.11.07)
$B!!(BOracle $BJ}LL!"$$$m$$$mBgNL$K=P$F$$$^$9!#(B
$B!U(B
$B!V;R5\pt$,$s%o%/%A%s!W$X$N5?Ld!'=EBg$JI{:nMQ(B
($B$R$i$,$J#5J8;z$N!V$O$?$H$b$3!W%V%m%0(B, 5/16)
$B1Q9q$N(B14$B:P$N>/=w$,@\5G'$7$F$$$?F1$88z2L$N%o%/%A%s!V%,!<%@%7%k!W$h$j$bCY$l$k$3$HLs(B3$BG/!"JF9q$G$b:rG/F|K\$H$[$\F1;~4|$K>5G'$5$l$?!V%5!<%P%j%C%/%9!W$G$9$,!"8zG=8z2L$rFI$a$PFI$`$[$I!"F|K\$G?d>)$5$l=8CD@\
$BE:IUJ8=q$h$k$H%5!<%P%j%C%/%9$N8zG=8z2L$O!"?t
$B99$K@\e$NCm0U$H$7$FE:IUJ8=q$K$O!"!V(B(1)HPV-16$B7?5Z$S(B18$B7?0J30$N4b86@-(BHPV$B46@w$K5/0x$9$k;R5\pt4b5Z$S$=$NA06nIBJQ$NM=KI8z2L$O3NG'$5$l$F$$$J$$!#(B(2)$B@\I$KBP$7Cm0U$9$k$3$H$,=EMW$G$"$k!#(B(4)$BK\:^$NM=KI8z2L$N;}B34|4V$O3NN)$7$F$$$J$$!#!W$N(B4$B9`L\$,L@5-$5$l$F$$$^$9!#(B
$B!!(B$B?70eLtIJ$N!V@\e$NCm0U!W$N2r@b!!%5!<%P%j%C%/%9(B
($B%0%i%/%=!&%9%_%9%/%i%$%s(B) $B$K!"3N$+$K$=$&=q$+$l$F$$$k!#(B
$B!!(B$B;R5\$,$s(B ($B4b8&M-L@IB1!(B) $B$h$j(B:
HPV6$B7?!"(B11$B7?$,8+$D$+$kIBJQ$O$,$s2=$7$J$$$H$$$&$3$H$O$[$\4V0c$$$,$J$$$H9M$($i$l$F$$$^$9!#(B
$B$7$+$7!"9b4m817?$N(BHPV$B$,8+$D$+$C$?>l9g!"$=$N0[7A@.$,3N
$B:G$b$,$s2=$NN($,9b$$$H9M$($i$l$F$$$k(BHPV16$B7?$,8+$D$+$C$?>l9g$G$5$(!"Ls(B20%$B$K$7$+$,$s2=$O5/$3$j$^$;$s!#(B
$B!!$=$&$$$&$b$N$J$s$@!D!D!#(B
HPV18$B7?$O2$JF$G$N8&5f$+$i9b4m817?$KJ,N`$5$l$F$$$^$9!#(B
HPV18$B7?$O!"@h$K=R$Y$^$7$?;R5\ptItA#$,$s$G$OLs(B50%$B$K8+$D$+$j$^$9$N$G!"3N$+$K9b4m817?$N%&%$%k%9$H8@$C$F$h$$$H;W$$$^$9!#(B
$B$7$+$7!"IBJQ$N7P2a$K$D$$$F8&5f$,$h$j?J$s$G$$$kY(J?>eHi$,$s$K8B$C$F8@$($P!"$*OC$O0c$C$F$-$^$9!#(B
$B4b8&$N45eHi0[7A@.$G$,$s2=$7$?$b$N$O(B1$BNc$b$J$/!"$9$Y$FL5<#NE$G<+A3>C<:!"<#L~$7$F$$$^$9!#(B
$B!!$=$&$$$&$b$N$J$s$@!D!D!#%5!<%P%j%C%/%9$,M=KI8z2L$r;}$D$N$O!"$3$&$$$&$b$N$KBP$7$F$N$_$@$H!#(B
HPV52$B7?!"(B58$B7?$O2$JF$NJs9p$G$O$,$s$+$i8+$D$+$k$3$H$,>/$J$$$H$5$l!"$"$^$jCmL\$5$l$F$$$^$;$s!#(B
$B$7$+$7!"F|K\$G$O(BHPV52$B7?!"(B58$B7?$,$,$sAH?%$+$i9bN($K8+$D$+$k798~$,$"$j!";d$?$A$O$3$l$i(BHPV52$B7?!"(B58$B7?$r9b4m817?(BHPV$B$H9M$($F$$$^$9!#(B
$BD4::!"8&5f$,$I$3$N9q!"$I$NCO0h$G9T$o$l$?$+$K$h$C$F!"9b4m817?$KJ,N`$5$l$k(BHPV$B$N7?$,0c$C$F$-$F$7$^$&2DG=@-$,$"$j$^$9!#(B
$BF|K\?M$K$H$C$F$N9b4m817?(BHPV$B$r$-$A$s$H8+$-$o$a$k$?$a$K$O!"F|K\?M$N45
high$B!!(Brisk$B!!(Btype$B!!$N(BHPV$B$K46@w$7$F$$$k0[7A@.$,;R5\pt$,$s$X$H?J$s$G$$$/$H$$$&2>@b$r>ZL@$9$k$?$a$K$OD94|4V$K$o$?$k7P2a4Q;!$K$h$k8&5f$,I,MW$G$9!#(B
$B;d$?$A4b8&IX?M2J$G$O!"(B10$BG/0J>eA0$+$i$3$NL?Bj$K
$B$7$+$7!"$3$l$i9b4m817?$H9M$($i$l$k(BHPV$B$,8+$D$+$C$?0[7A@.$G$b$,$s2=$9$k$N$O(B6$B!](B7$B?M$K(B1$B?M$G$9!#(B
$B8=:_!"F1$87?$N(BHPV$B$r;}$C$F$$$k$N$K$,$s2=$9$kIBJQ$H<+A3<#L~$9$kIBJQ$H$,$"$k$N$O2?8N$+!"$=$N0c$$$rL@$i$+$K$9$k8&5f$K
$B!U(B
$B@m3U=tEgJ}LL(B
$B!U(B
$B8!;!?3$NJ?6QG/Np$r:FD{@5!"(B34.55$B:P$K!!>.Bt;a$N5/AJ5D7h(B
($BF|7P(B, 10/13)$B!#(B
$B$b$&$o$1$,$o$+$j$^$;$s!#(B
$B!!>.Bt0lO:!&L1.Bt;a$r5/AJ5D7h$7$?#97n(B14$BF|;~E@$N?3::0w(B11$B?M$NJ?6QG/Np$r!V(B33.91$B:P!W$+$i!V(B34.55$B:P!W$H:FD{@5$7$?!#D{@5A0$O?3::0w="G$;~$NG/Np$G7W;;$7$F$$$?!#(B
$B!!J?6QG/Np$OEv=i!V(B30.9$B:P!W$H8xI=$7$?$,!"7W;;%_%9$,H/3P$7$F(B12$BF|$KD{@5$7$?$P$+$j$@$C$?!#(B
$B!!0JA0$N5D7h$b5D7hF|$r4p=`$KJ?6QG/Np$r:F7W;;$7$?$H$3$m!"F18!;!?3$,>.Bt;a$r!V5/AJAjEv!W$H$7$?#12sL\$N5D7h$O(B34.55$B:P!"#77n$K>.Bt;a$r!VIT5/AJITEv!W$H$7$?Bh#18!;!?3$O(B50.00$B:P!#H7;3M35*IWA0
$B!!7k6I!"(B1$B2sL\$N5D7h$H(B2$B2sL\$N5D7h$N?3::0wJ?6QG/Np$O!"K\Ev$K!"A4$/F1$8!V(B34.55$B:P!W$J$N$@$=$&$@!#$?$@$G$5$(F|K\9qL1$NJ?6QG/Np$rBgI}$K2<2s$C$F$$$k>e$K!"9=@.0w$rJQ99$7$?$N$KJ?6QG/Np$,A4$/F1$8$@$J$s$F!D!D!#$"$jF@$M$(!D!D!#(B
$B!U(B
$B1G2h!V(B007$B!W%7%j!<%:$rWGWJ!D!D:G?7!VEp;#!W5!4o;v>p(B
(ITmedia, 10/13)$B!#%i%8%*%i%$%U$N9-9p$H$+$K$U$D$&$K=P$F$k$h$M!#(B
$B!U(B
Facebook $BJ}LL(B
$B!U(B
$B!V%b%P%2!<4F;k$N>u67$O$$$+$K!W!"AmL3>J(B $B@D>/G/(BWG$B$G(BDeNA$B$,@bL@(B
($BF|7P(B IT Pro, 10/12)$B!#(B
$B@D>/G/%$%s%?!<%M%C%H(BWG$B!!!JBh(B1$B2s2q9g!K(B ($BAmL3>J(B, 9/21) $B$N7o!#(B
$B!U(B
Announcing Microsoft Security Intelligence Report version 9
(Microsoft Malware Protection Center, 10/13)$B!#%5%^%j!
$B!U(B
$BM9JXIT@5;v7o!VQM:aJsF;!W$OI9;3$N0l3Q!!!!!VL5:a!W$,3NDj$7$F$b%Y%?5-;v07$$$G=*$o$C$?!V%d%_6b;q6b@v>t;v7o!W306d859T0w$NJsF;Ho32(B
($BKRLnMN$N!V%8%c!<%J%j%:%`$O;`$s$@$+!W(B, 10/14)
$B!U(B
$B8!;!(B3$B$D$N!H8xA3$NHkL)!I(B -- $B!V%9%H!<%j!
($B=54)!&>e?yN4(B, 10/14)$B!#$7$+$bHo9p$H$J$C$?8!;!41$K$h$C$F!#(B
$B!U(B
$B4XO"5-;v%$%s%G%C%/%9!!(B
2011$BG/HG%;%-%e%j%F%#%=%U%H$^$H$a(B
(Internet Watch)$B!#(BMSE $B$bF~$l$k$Y$-$@$h$M!#(B
$B!U(B
Yahoo! Japan$B$N%"%/%;%9>c32!"860x$O%m!<%I%P%i%s%5!<$NJ*M}>c32(B
(CNET, 10/14)
$B!U(B
$B%^%k%3%`!&%0%i%C%I%&%'%k$N6l8@$H2,EDEM;JIW$NM=8@(B
(WIRED VISION, 10/14)$B!#(BTwitter / Facebook $B$JOC!#$o$)!"(Bmohri $B$5$sEP>l!#(B
$B!U(B
$B9q8x;dN)Bg3X?^=q4[$,CD7k!"EE;R%8%c!<%J%k9XF~$GBg5,LO%3%s%=!<%7%"%`@_N)(B
(Internet Watch, 10/13)$B!#!V2I@j;T>l$rGX7J$KKhG/CM>e$2$9$kBgD$GBP93(B $B!W(B
$B!U(B
$B!V(BUnicode 6.0$B!W$,:vDj!"3(J8;z$,9q:]I8=`$K(B
(Internet Watch, 10/14)$B!#$3$s$J;~Be$,$d$C$F$/$k$H$O!D!D!#M=A[30$G$9!#(B
$B!U(B
$B#3#3?MA40w$,@84T!!%A%jMnHW;v8N$N5_=P$r=*N;(B
(asahi.com, 10/14)$B!#$^$:$O$a$G$?$$!#(B
$B!!(BJava SE 6 Update 22 $BEP>l!#(B29 $B$B%@%&%s%m!<%I(B
$B!!4{$K(B Java SE 5.0 $B$O(B End of Servie Life (EOSL) $B$r7^$($F$$$k$N$GCm0U!#(B
for Business Support $B$K$D$$$F$O$^$@$^$@B3$$$F$$$k$h$&$G$9$,!#(B
JavaSE and Java for Business Support Roadmap
(Oracle)$B!#(B
Java SE 6 $B$bMhG/Kv$K$O(B EOSL $B$H$J$k$h$&$G$9!#(B
2010.10.21 $BDI5-(B:
$B!!(BMac OS X 10.6 $BMQ(B Java $B$b(B Java SE 6 Update 22 $B$K$J$j$^$7$?!#(B
Mac OS X 10.5 $B$K$O(B Java SE 5.0 Update 26 $B$,MQ0U$5$l$^$7$?!#(B
(Java SE 5.0 Update 26 $B$O!"$"$k0UL#!"5.=E$J$h$&$J!D!D(B)
$B!!4XO"(B: In other Apple news... Java updates
(Sophos, 2010.10.20)
$B!U(B
$B%l%C%I%V%k$N%Y%C%F%k!"F|K\(BGP$B$G%U%i%$%s%05?OG$,Ib>e(B
(TopNews / Yahoo, 10/13)
$B!U(B
$B4Z9q(B GP $B$K(B GO $B%5%$%s!"$7$+$7$R$I$$$3$H$K$J$j$=$&$JM=46(B
$B4Z9q%$%s%?!<%J%7%g%J%k%5!<%-%C%H$r(BFIA$B$,>5G'(B
(ESPN, 10/12)
$B7nMKF|$K;#1F$5$l$?2hA|$r8+$k$H!"%9%?!<%H!u%U%#%K%C%7%e%i%$%s$N%9%H%l!<%H$K$+$+$k66$,$^$@7z@_Cf$J$N$,J,$+$k!#0lJ}!"%5!<%-%C%H$X$Nl$r0O$&%U%'%s%9$b40@.$7$F$$$J$$!#(B
$B$@$,0lHV$N7|G0$OJ^AuLL$N(B"$BL}Ib$-(B"$B$@!#;\9)$5$l$?$P$+$j$N:G>eAX$+$i$O%*%$%k$,$7$_=P$7$F$*$j!"(B22$BF|(B($B6b(B)$B$NAv9T3+;O$^$G$K2~A1$7$=$&$b$J$$!#(B
$B!V%?%$%d$O@=B$:Q$_$G$9$N$G!"%H%i%$$7$F$_$k$7$+$"$j$^$;$s!W$H%V%j%B%9%H%s$N0B@n$R$m$7;a$O=R$Y$F$$$k!#!V3'$5$s!"%?%$%d$OF1$8$G$9!#$3$NCJ3,$G$OBT$D$7$+$J$$$G$7$g$&!W(B
$B::;!$r=*$($?%[%o%$%F%#%s%0!"(B"$BK~B-(B" (ESPN, 10/12)$B!#(B
$B7G:\$5$l$F$$$k6u;#
$B!U(B
$B%_%D%P%ABgNL;`$N860x!"2rL@$+(B
(slashdot.jp, 10/13)
$B!U(B
9$B7n$N%5%$%H2~$6$s(B (so-net $B%;%-%e%j%F%#DL?.(B, 10/7)
$B!U(B
$B%9%Q%$%&%'%"%Q%?!<%s%U%!%$%k(B 1.105.00 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B, 10/12)
$B!U(B
ServerProtect 5.8$B$K$*$$$F%9%Q%$%&%'%"%Q%?!<%s%U%!%$%k$NG[?.$,$G$-$J$$8=>]$K$D$$$F(B
($B%H%l%s%I%^%$%/%m(B, 10/12)$B!#(BServerProtect $BB&$NLdBj!#(B10/20 $B0J9_$K=$@5(B patch $B$,8x3+$5$l$kM=Dj!#(B
$B!U(B
$B;k3P>c32
(techcrunch, 10/12)
$B!U(B
$B%+!<%M%k%l%Y%k0E9f%U%!%$%k%7%9%F%`(Bpefs$B!$3+H/
(FreeBSD Daily Topics, 10/12)
$B!U(B
New Tool: SDL Regex Fuzzer
(Microsoft SDL Blog, 10/12)
$B!U(B
iPhone 4$B$N8N>cN($,(BiPhone 3GS$B$rBgI}$K>e2s$k!"FC$K%G%#%9%W%l%$$,3d$l$d$9$$$3$H$,L@$i$+$K(B
(gigazine, 10/13)
$B!U(B
$BIT@5%"%/%;%9$K$h$k%+!<%I>pJsN.=PAj (so-net $B%;%-%e%j%F%#DL?.(B, 10/12)
$B!U(B
[P2P]$B>pJsN.=P!'?@F`@n8)7Y$N2q5DO?(B/$BITF0;:4IM}2qpJsLs(B20$BK|7o(B
(so-net $B%;%-%e%j%F%#DL?.(B, 10/12)
$B!U(B
$B;v.@b$h$j$b4q$J$j(B $B(!(!(B $B8!;!?3::2q?3::0w$NJ?6QG/Np$r$a$0$kFf$N?t!9(B
(The Journal, 10/13)
$B!!%+%s$N1T$$FI.Bt;a$K(B1$B2sL\$N5/AJAjEv$r2<$7$??3::0w$NJ?6QG/Np!V(B34.27$B:P!W$H$^$C$?$/F1$8$J$N$G$"$k!#$J$*!"8!;!?3::2q$O!"(B1$B2sL\$H(B2$B2sL\$N5D7h$G?3::0w$NA40w$rF~$l$+$($?$3$H$rH/I=$7$F$$$k!#$$$C$?$$!"$3$N3NN($O2?%Q!<%;%s%H$J$N$+!"$b$O$d7W;;$9$k5$$b$*$3$i$J$$$[$I$@!#(B
$B!!"vFf$,Ff$h$V8!;!?3::2q!A(B ($B;z$"$^$j(B)$B!#(B
$B%Q%$%W$r$/$o$($?C5De$NEP>l$rBT$D$7$+$J$$$N$+!#(B
($B85$M$?(B)
$B!!$D$E$-(B: RT @haughtyfool: @j_the_journal $B?t$(K:$l$??M$NG/Np$O(B37$B:P!#7W;;$,9g$o$J$$$N$G!"8!;!?3::2q;vL36I$K3NG'$7$?$H$3$m!"?3::0wA40w$NG/Np$r:FEY3NG'$7!"5D7h;~G/Np$K;;=P$7D>$7$?$H$N$3$H$G$9!#(B
(@j_the_journal THE-JOURNAL$BJT=8It(B, 10/13)
$B!U(B
$B!XD+F|!Y$N!VE7@.BtHcH=$O8@8lF;CG(B
($B%+%J%@(Bde$BF|K\8l(B, 10/7)$B!"(B$BD+F|?7J9$N!VE7@ ($BHD3@(B $B1Q7{!J$$$?$,$-(B $B$($$$1$s!K!V%^%9%3%_$K=P$J$$@/<#7P:Q$NN"OC!W(B, 10/6)$B!#$&$o!"$3$l$OK\Ev$K$R$I$$!#(B
$B!!>\:YITL@$@$,!"%&%$%k%9%P%9%?!<(B 2010 $B$K!V%M%C%H%o!<%/7PM3$GFCDj$NL?Na$r
$B!!%&%$%k%9%P%9%?!<(B 2009 $B$d(B 2011 $B%/%i%&%I$K$O$3$N7g4Y$O$J$$$_$?$$!#(B
$B!!!D!DJ!8w$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B)
ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability
http://www.st.ryukoku.ac.jp/~kjm/security/memo/2010/08.html#20100827_Trend
$B$N$3$H$N$h$&$G$9!#(B
17:00$B:"%"%C%W%G!<%H$7$?$H$3$m(B
UfPBCtrl.dll$B$N%P!<%8%g%s$,(B
17.50.0.1647$B$+$i(B17.50.0.1697
$B$K>e$,$j$^$7$?!#(B
$B!!(BOpera 10.63 $B=P$^$7$?!#J#?t$N%;%-%e%j%F%#=$@5$,4^$^$l$F$$$^$9!#(B
$B!!=P$^$7$?!#(BMS10-071 $B!A(B MS10-086$B!#@h7n$N(B MS10-063 $B$K$R$-$D$E$-!":#7n$b(B OpenType $B$M$?$,$"$k$N$@$J$"!#(B($B$"$H$GDI5-$9$kM=Dj(B)
$B!!4XO"(B:
2010.10.19 $BDI5-(B:
-
MS10-071 - $B6[5^(B:
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (2360131)
-
$B!!(BIE 6 / 7 / 8 $B$K(B 10 $B8D$N7g4Y!#(B
$B%*!<%H%3%s%W%j!<%H$N>pJsO3$($$$N@HCVE-2010-0808
Windows XP / Vista $B>e$N(B IE 6 / 7 $B$N7g4Y!#(B
$B!V%*!<%H%3%s%W%j!<%H5!G=$,M-8z$K$5$l$F$$$?>l9g!"%U%)!<%`(B $B%U%#!<%k%I$KF~NO$5$l$?FbMF$r%-%c%W%A%c$9$k2DG=@-$,$"$j$^$9!W(B
HTML $B$N%5%K%?%$%:$N@HCVE-2010-3243
IE 8 $B$N(B toStaticHTML API $B$N7g4Y!"(BXSS $B$,H/@8!#!V%f!<%6!<$N%;%-%e%j%F%#(B $B%3%s%F%-%9%H$G(B Web $B%5%$%H$KBP$7%9%/%j%W%H$,
HTML $B$N%5%K%?%$%:$N@HCVE-2010-3324
IE 8 $B$N(B toStaticHTML API $B$N7g4Y!"(BXSS $B$,H/@8!#!V%f!<%6!<$N%;%-%e%j%F%#(B $B%3%s%F%-%9%H$G(B Web $B%5%$%H$KBP$7%9%/%j%W%H$,
CSS $BFCpJsO3$($$$N@HCVE-2010-3325
IE 6 / 7 / 8 $B$N7g4Y!#!V(BInternet Explorer $B$,(B CSS $B$NFC
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3326
IE 6 $B$N7g4Y!#96N,(B Web $B%Z!<%8$K$h$jG$0U$N%3!<%I$,
$B%"%s%+!pJsO3$($$$N@HCVE-2010-3327
IE 6 / 7 / 8 $B$N7g4Y!#!V:o=|:Q$_$N>pJs$,(B HTML $B%3%s%F%s%D$K;D$k2DG=@-$,$"$j$^$9!W(B
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3328
IE 6 / 7 / 8 $B$N7g4Y!#96N,(B Web $B%Z!<%8$K$h$jG$0U$N%3!<%I$,
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3329
IE 7 / 8 $B$N7g4Y!#(BHtmlDlgHelper Class COM $B%*%V%8%'%/%H$K7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$K$h$jG$0U$N%3!<%I$,
$B%/%m%9(B $B%I%a%$%s$N>pJsO3$($$$N@HCVE-2010-3330
IE 6 / 7 / 8 $B$N7g4Y!#!V(BInternet Explorer $B$N%;%-%e%j%F%#(B $B%>!<%s$^$?$OJL$N%I%a%$%s$+$i%3%s%F%s%D$r1\Mw$9$k2DG=@-$,$"$j$^$9!W!#(BExploitability Index: 3
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-3331
IE 6 / 7 / 8 $B$N7g4Y!#96N,(B Word $B%I%-%e%a%s%H$r3+$-!"JD$8$k$HG$0U$N%3!<%I$,
$B!!(BHotfix $B$K4^$^$l$kHs%;%-%e%j%F%#$J=$@5$O$3$A$i(B:
KB 2360131
-
MS10-072 - $B=EMW(B:
SafeHTML $B$N@HpJsO3$($$$,5/$3$k(B (2412048)
-
$B!!(BSharePoint Services 3.0$B!"(BSharePoint Foundation 2010$B!"(B
SharePoint Server 2007$B!"(BGroove Server 2010$B!"(BOffice Web Apps $B$K!">pJsO31L$K4X$9$k(B 2 $B$D$N7g4Y!#(BSafeHTML $B$K7g4Y$,$"$j!"(BXSS $B$,H/@8!"(Blocal user $B$N%3%s%F%-%9%H$G967b%9%/%j%W%H$,CVE-2010-3243 (Exploitability Index: 3)$B!"(B
CVE-2010-3324 (Exploitability Index: 3)
-
MS10-073 - $B=EMW(B:
Windows $B%+!<%M%k%b!<%I(B $B%I%i%$%P!<$N@H:3J$5$l$k(B (981957)
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(BWindows $B%+!<%M%k%b!<%I%I%i%$%P!<$K(B 3 $B$D$N7g4Y$,$"$j!"(Blocal user $B$K$h$k8"8B>e>:$,2DG=!#(B
Win32k $B$N;2>H%+%&%s%H$N@HCVE-2010-2549
Windows Vista / Server 2008 $B$N7g4Y!#(BExploitability Index: 3
Win32k $B$N%-!<%\!<%I$N%l%$%"%&%H$N@HCVE-2010-2743
Widnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$N7g4Y!#(BWidnows XP $B$O!V=EMW!W!"$=$NB>$O!VCm0U!W!#$3$N7g4Y$rMxMQ$9$k%^%k%&%'%"$,B8:_!#(BExploitability Index: 1
Win32k $B$N%&%#%s%I%&(B $B%/%i%9$N@HCVE-2010-2744
Widnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$N7g4Y!#(BExploitability Index: 1
-
MS10-074 - $B7Y9p(B:
Microsoft Foundation Classes $B$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(B
Microsoft Foundation Class (MFC) Library $B$K7g4Y$,$"$j!"(B
$B%"%W%j%1!<%7%g%s$K$*$$$F!"G$0U$N%3!<%I$,CVE-2010-3227$B!#(BExploitability Index: N/A
2010.10.27 $BDI5-(B:
$B!!(BMS10-074$B!"@HPowerZip 7.21 (Build 4010) Stack Buffer Overflow (exploit-db.com)$B!"(B
CVE-2010-3227
-
MS10-075 - $B6[5^(B:
Windows Media Player $B%M%C%H%o!<%/6&M-%5!<%S%9$N@H
-
$B!!(BWindows Vista / 7 $B$K7g4Y!#(BWindows Media Player $B%M%C%H%o!<%/6&M-%5!<%S%9$K$*$1$k(B RTSP $B%Q%1%C%H$N=hM}$K7g4Y$,$"$j!"96N,(B RTSP $B%Q%1%C%H$K$h$C$F(B remote $B$+$iG$0U$N%3!<%I$,CVE-2010-3225$B!#(BExploitability Index: 1
-
MS10-076 - $B6[5^(B:
Embedded OpenType $B%U%)%s%H(B $B%(%s%8%s$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(BEmbedded OpenType $B%U%)%s%H%(%s%8%s$K7g4Y$,$"$j!"96N,Kd$a9~$_%U%)%s%H$r4^$`(B Web $B%Z!<%8$K$h$C$FG$0U$N%3!<%I$,CVE-2010-1883$B!#(BExploitability Index: 1
-
MS10-077 - $B6[5^(B:
.NET Framework $B$N@H
-
$B!!(B.NET Framework 4.0 $B$K7g4Y!#(Bx64 / Itanium $B>e$N(B JIT $B%3%s%Q%$%i$K7g4Y$,$"$j!"G$0U$N%3!<%I$,
$B96N,(B XBAP (XAML Browser Application) $B$r4^$`!"96N,(B Web $B%Z!<%8$r1\Mw$9$k(B
$B96N,(B ASP.NET $B%"%W%j%1!<%7%g%s$r%"%C%W%m!<%I$5$l!"
$B$H$$$C$?967b$,9M$($i$l$k!#(B
CVE-2010-3228$B!#(BExploitability Index: 1
$B!!$3$N7g4Y$O(B 32bit $B4D6-$K$O1F6A$7$J$$!#(B
$B!!(BHotfix $BE,MQ$K4X$9$k4{CN$N;v9`$,(B KB 2160841
$B$K<($5$l$F$$$k!#(B
-
MS10-078 - $B=EMW(B:
OpenType $B%U%)%s%H(B (OTF) $B7A<0%I%i%$%P!<$N@H:3J$5$l$k(B (2279986)
-
$B!!(BWindows XP / Server 2003 $B$K7g4Y!#(B
OpenType $B%U%)%s%H(B (OTF) $B7A<0%I%i%$%P!<$K(B 2 $B$D$N7g4Y$,$"$j!"(B
local user $B$K$h$k8"8B>e>:$,2DG=!#(B
$B96N,(B OpenType $B%U%)%s%H$rKd$a9~$s$@(B Web $B%Z!<%8$r(B (IE $B$G$O$J$/(B) 3rd party $B@=(B Web $B%/%i%$%"%s%H$G3+$/$H967b$,@.N)$9$k!#(B
-
MS10-079 - $B=EMW(B:
Microsoft Word $B$N@H
-
$B!!(BWord 2002 / 2003 / 2007 / 2010$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/!"(BWord Viewer$B!"(BOffice Web Apps$B!"(BWord Web App $B$K(B 11 $B8D$N7g4Y!#BgH>$N7g4Y$O(B Word 2002 $B$H(B Office 2004 for Mac $B$K$7$+1F6A$7$J$$!#(B
Word $B$N=i4|2=$5$l$F$$$J$$%]%$%s%?!<$N@HCVE-2010-2747
Exploitability Index: 2
Word $B$N6-3&%A%'%C%/$N@HCVE-2010-2748
Exploitability Index: 2
Word $B$N%$%s%G%C%/%9$N@HCVE-2010-2750
Exploitability Index: 2
Word $B$N%9%?%C%/(B $B%*!<%P!<%U%m!<$N@HCVE-2010-3214
Word 2002 / 2003 / 2007 / 2010$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/!"(BWord Viewer$B!"(BOffice Web Apps$B!"(BWord Web App $B$N7g4Y!#(BExploitability Index: 1
Word $B$NLa$jCM$N@HCVE-2010-3215
Exploitability Index: 2
Word $B$N%V%C%/%^!<%/$N@HCVE-2010-3216
Exploitability Index: 1
Word $B$N%]%$%s%?!<$N@HCVE-2010-3217
Word 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Word $B$N%R!<%W(B $B%*!<%P!<%U%m!<$N@HCVE-2010-3218
Word 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Word $B$N%$%s%G%C%/%9$N2r@O$N@HCVE-2010-3219
Word 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Word $B$N2r@O$N@HCVE-2010-3220
Exploitability Index: 2
Word $B$N2r@O$N@HCVE-2010-3221
Word 2002 / 2003$B!"(BOffice 2004 for Mac$B!"(BWord Viewer $B$N7g4Y!#(BExploitability Index: 2
-
MS10-080 - $B=EMW(B:
Microsoft Excel $B$N@H
-
$B!!(BExcel 2002 / 2003 / 2007$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BExcel Viewer$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/$K(B 13 $B8D$N7g4Y!#(B
Excel $B$N%l%3!<%I$N2r@O$N@0?t%*!<%P!<%U%m!<$N@HCVE-2010-3230
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 2
Excel $B%l%3!<%I2r@O$N%a%b%jGKB;$N@HCVE-2010-3231
Excel 2002$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac $B$N7g4Y!#(BExploitability Index: 2
Excel $B$N%U%!%$%k7A<0$N2r@O$N@HCVE-2010-3232
Excel 2003 / 2007$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac$B!"(BExcel Viewer$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/$K7g4Y!#(BExcel 2002 $B$K$3$N7g4Y$O$J$$!#(BExploitability Index: 1
Lotus 1-2-3 $B$N%o!<%/%V%C%/$N2r@O$N@HCVE-2010-3233
Excel 2002 / 2003 $B$N7g4Y!#(BExploitability Index: 2
$B?t<0$N%5%V%7%9%F%`$N%a%b%jGKB;$N@HCVE-2010-3234
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 1
$B?t<0$N(B Biff $B$N%l%3!<%I$N@HCVE-2010-3235
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 1
$B6-3&30$NG[Ns$N@HCVE-2010-3236
Excel 2002$B!"(BOffice 2004 / 2008 for Mac$B!"(BOpen XML File Format Converter for Mac $B$N7g4Y!#(BExploitability Index: 1
$B%;%k$N7k9g$N%l%3!<%I(B $B%]%$%s%?!<$N@HCVE-2010-3237
Excel 2002$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 2
Negative Future Function $B$N@HCVE-2010-3238
Excel 2002 / 2003$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 1
$B$=$NB>$N6-3&30$N%l%3!<%I$N2r@O$N@HCVE-2010-3239
Excel 2002 $B$N$_$N7g4Y!#(BExploitability Index: 1
$B%j%"%k(B $B%?%$%`$N%G!<%?G[Ns$N%l%3!<%I$N@HCVE-2010-3240
Excel 2002 / 2007$B!"(BExcel Viewer$B!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/$N7g4Y!#(BExploitability Index: 2
$B2r@O$K$*$1$k6-3&30$N%a%b%j$N=q$-9~$_$N@HCVE-2010-3241
Excel 2002$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 2
$BHsCVE-2010-3242
Excel 2002$B!"(BOffice 2004 for Mac $B$N7g4Y!#(BExploitability Index: 2
-
MS10-081 - $B=EMW(B:
Windows $B%3%b%s(B $B%3%s%H%m!<%k(B $B%i%$%V%i%j$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(BComctl32.dll $B$K7g4Y$,$"$j!"!V%5!<%I%Q!<%F%#$N%9%1!<%i%V%k(B $B%Y%/%?!<(B $B%0%i%U%#%C%/%9(B (SVG) $B%S%e!<%"!<$+$iEO$5$l$?%9%1!<%i%V%k(B $B%Y%/%?!<(B $B%0%i%U%#%C%/%9$r8F$S=P!W$9>l9g$K(B heap overflow $B$9$k7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$r3+$/$HG$0U$N%3!<%I$,CVE-2010-2746$B!#(BExploitability Index: 1
-
MS10-082 - $B=EMW(B:
Windows Media Player $B$N@H
-
$B!!(BWindows Media Player 9 $B!A(B 12 $B$K7g4Y$,$"$j!"96N,(B Web $B%Z!<%8$r3+$/$HG$0U$N%3!<%I$,CVE-2010-2745$B!#(BExploitability Index: 1
-
MS10-083 - $B=EMW(B:
Windows $B%7%'%k$*$h$S%o!<%I%Q%C%I$N(B COM $B$N8!>Z$N@H
-
$B!!(BWidnows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#!V(BWindows $B%7%'%k$*$h$S%o!<%I%Q%C%I$,(B COM $B%*%V%8%'%/%H$N%$%s%9%?%s%92=$r8!>Z$9$kJ}K!!W$K7g4Y$,$"$j!"96N,%U%!%$%k$d96N,(B Web $B%Z!<%8$r3+$/$HG$0U$N%3!<%I$,CVE-2010-1263$B!#(BExploitability Index: 1
$B!!(BHotfix $B$NE,MQ$K:]$7$F!"(BWindows Search 4.0 $B$r%$%s%9%H!<%k$7$F$"$k4D6-$G$OCm0U$,I,MW$JLOMM(B: KB 2405882
-
MS10-084 - $B=EMW(B:
Windows $B%m!<%+%k(B $B%W%m%7!<%8%c!<(B $B%3!<%k$N@H:3J$5$l$k(B (2360937)
-
$B!!(BWindows XP / Server 2003 $B$N(B Remote Procedure Call Subsystem (RPCSS) $B$K7g4Y!#(B
RPCSS $B$K4^$^$l$k(B LRPC Server (Local RPC Server; RPC EndPoint Mapper) $B$H!"(B
LPC (Local Procedure Call) $B$H$N4V$N%]!<%H%a%C%;!<%8$N=hM}$K(B buffer overrun $B$9$k7g4Y$,$"$j!"(Blocal user $B$K$h$k8"8B>e>:(B (LocalSystem $BC%CVE-2010-3222$B!#(BExploitability Index: 1
-
MS10-085 - $B=EMW(B:
SChannel $B$N@H
-
$B!!(BWidnows Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#(B
$B!V(BSChannel $B$,(B SSL/TLS $B%O%s%I%7%'%$%/Cf$N%W%m%H%3%kMW5a$r=hM}$9$kA0$NO@M}>uBV$N8!::$K<:GT!W$9$k$?$a!"96N,(B SSL/TLS $B%O%s%I%7%'%$%/$rAw?.$9$k$3$H$K$h$C$F(B DoS $B967b(B ($B%5!<%P!<1~EzDd;_(B) $B$,2DG=!#(BCVE-2010-3229$B!#(BExploitability Index: 3
-
MS10-086 - $B7Y9p(B:
Windows $B6&M-%/%i%9%?!<(B $B%G%#%9%/$N@H
-
$B!!(BWindows Server 2008 R2 $B$K7g4Y!#6&M-%U%'!<%k%*!<%P!<%/%i%9%?!<$H$7$F;HMQ$7$F$$$k>l9g$K!"!V4IM}Z$5$l$F$$$J$$%f!<%6!<(B (Everyone) $B$K%U%'!<%k%*!<%P!<(B $B%/%i%9%?!<(B $B%G%#%9%/$N4IM}MQ6&M-$X$NFI$_CVE-2010-3223
$B!!(Bhotfix $B$rE,MQ$7$?8e$G!"4{$K@_Dj$5$l$F$$$k%U%'!<%k%*!<%P!<%/%i%9%?!<%G%#%9%/$K$D$$$F$O!"(B
Everyone $B%U%k%3%s%H%m!<%k$r(B Administrators $B%U%k%3%s%H%m!<%k$KJQ99$9$k$3$H!#(B
2011.01.11 $BDI5-(B:
$B!!(BMS10-081: Windows Common Control Library (Comctl32) Heap Overflow
(exploit-db.com, 2011.01.10)
$B!!2,:j?^=q4[(B $B"*(B MELIL/CS $BJ}LL!#(B
$B!!>pJsN.=P$N:G=*@UG$$O<+<#BN$K$"$j!"<+<#BN$K$O$I$N$h$&$J>pJs$,$I$N$h$&$J7P0^$GN.=P$7$?$+$rD4::$7!"8xI=$7!":#8e:FH/$7$J$$$h$&BP:v$r9V$8$k@UL3$,$"$j$^$9!#4IM}6H$^$7$$$N$G$9$,!"$=$l$,IT2DG=$G$"$C$?$H$7$F$b<+$i$N@UG$$K$*$$$FK\7o$K$D$$$FD4::!&8!>Z$9$kI,MW$,$"$j$^$9!#$I$N$h$&$J>pJs$,N.=P$7$F$$$?$+!"B>$N?^=q4[$N$I$N$h$&$J>pJs$,<+4[%7%9%F%`$K:.F~$7$F$$$?$+$r?^=q4[!&<+<#BN$,GD0.$;$:!"C1$KN.=P%G!<%?$N>C5nEy$,9T$J$o$l$F$$$k$N$G$"$l$PLdBj$G$9!#2,:j;TN)Cf1{?^=q4[$N>l9g!"#M#D#I#S$OB>$N?^=q4[$KN.=P$7$?%G!<%?$rA4$F:o=|$7$?8e!"2,:j;TN)Cf1{?^=q4[$K>pJsO31L$rJs9p$7$F$$$^$9!#D>$A$KJs9p$r9T$J$o$J$+$C$?$3$H$d!"N.=P$7$?B&$N?^=q4[$KN.=P%G!<%?$r:o=|$9$k:]==J,$JJs9p$r9T$J$C$?$+!"$J$IBP1~$K5?Ld$,;D$j$^$9!#(B
$B!!K\7o$O!"8D?M>pJs5Z$S?^=q4[4X78%G!<%?$NJ#?t<+<#BN$K$^$?$,$k>pJsO31L;v7o$H$7$F!"Hs>o$K=EBg$J$b$N$G$9!#$=$N=EBg@-$K4U$_!"K\7o>pJsO31L$K$D$$$F@53N$K>pJs$rGD0.$7:FH/$rKI$0$?$a!"2<5-$NBP1~$r6[5^$KMW@A$$$?$7$^$9!#(B
$B!!6H
$B!!$H8@$C$F$$$k$&$A$K!"(B$B$?$j$-$5$s$,$^$?$_$D$1$?(B$B$=$&$G!#(B
$B$($S$N$N(BFTP$B$G8x3+$5$l$F$$$?$b$N$+$i(B$B$@$=$&$G$9!#(B
$B!U(B
$B%b%k%,%s!&%9%?%s%l!6H0w$r2r8[!!(B
$B2r8[$5$l$??MJ*$O!"%K%e!<%h!<%/$NCO2h5R$N%3%_%e%K%F%#7A@.$K?TNO$7$F$$$?(B
(computerworld.jp, 10/8)
$B!!%K%e!<%h!<%/$NCO2h5R$I$&$7$,Hs>o$K$h$=$h$=$7$$$N$,>o$@$,!"%l%G%i!<;a$O$=$&$7$?DL6Ph5R$I$&$7$G$"$C$F$b!"?M$H$U$l$"$&$3$H$O$G$-$k$H?.$8$F$$$k!W$H!"F1;a$O%$%s%?%S%e!<$KEz$($?!#(B
$B!!$+$s$Y$`$5$7$NC;JT>.@b$K!"$=$s$JOC$,$"$C$?$J!D!D!#(B
$B!U(B
$B$"$+$i(B2010$B>!Mx!"%3%s%T%e!<%?>-4}$N@o$$$O?7$?$JCJ3,$X(B
($B%3%s%T%e!<%?>-4}6(2q(Bblog, 10/11)$B!#(B
$B$D$$$K$3$3$^$GMh$?!#(B
$BZL@$5$l$?$H;W$$$^$9!#BP6I>l$K$*$$$F$b!"?MN`$N1CCR$,5!3#$K6~$7$F$7$^$C$?!"$H$$$C$?$h$&$JHaAT46$OBP6I8e$b$J$/!"?M4V$H%3%s%T%e!<%?$,8_$$$r9%E(
$B!!4XO"(B:
$B%3%s%T%e!<%?$H=wN.2&>-$NBP6I!"%3%s%T%e!<%?$,>!Mx(B
(slashdot.jp, 10/12)
$B%3%s%T%e!<%?>-4}$,=wN.2&>-$K>!Mx(B
(PC Watch, 10/12)
$B!!BP6ID>8e!"BgHW2r@b$N2q>l$K;Q$r8+$;$?@6?e;TBe=wN.2&>-$O!"BgHW2r@b$r9T$J$C$?CK@-4};N(B2$B?M$N!VM=A[30$N-4}$N8&5f$r$7$?$H;W$C$F$$$k$s$G$9$+!W$H$=$N
$B!!$7$+$7!"?M4V$,%3%s%T%e!<%?$KIi$1$k$H$$$&7k2L$K$J$C$?$3$H$KBP$7$F$O!"F|K\>-4}O"LA!!JFD9K.M:2qD9$,!"!V@6?e$5$s$,D99M$7$9$.$?7k2L$G$O!#$"$=$3$G9M$($9$.$:!"AGD>$KBG$C$F$$$?$i7k2L$O0c$C$F$$$?$s$G$O$J$$$+!W$H
$B!!$=$N8e!"5--$O!V;vA0$K%3%s%T%e!<%?>-4}$r8&5f$7$?2aDx$G!"$"$kDxEY%$%a!<%8$O;}$C$F$$$?$,!"/$7%$%a!<%8$O0c$$$^$7$?!#$b$C$H!"?M4V$NA[A|$rD6$($?!"4qA[E730$J$JBP6I$N46A[$rOC$7$?!#(B
$B?M4V$NJ}$,0U<1$7$9$.$F?
$B!!%3%s%T%e!<%?$,=wN.2&>-$K>!Mx$7$?$3$H$G!"%W%mCK@-4};N$H$NBP6I$r4|BT$9$k@<$b$"$,$C$?$,!"F|K\>-4}O"LA$NJFD92qD9$O!"!V$^$:!":#2s$NBP6I$r:Y$+$/@:::$7$J$1$l$P$J$s$H$b?=$7>e$2$i$l$J$$!#>pJs=hM}3X2q$N3'$5$s!"%U%!%s$N3'$5$s$N@<$rF'$^$($F!":#8e$O7hDj$7$F$$$-$?$$!#$?$@!"8D?ME*$K$O@6?e=wN.2&>-$N%j%Y%s%8$r4|BT$7$?$$!W$H46A[$r=R$Y$?!#(B
$B$J$s$K$;$h!"!V$*$b$7$m$/$J$C$F$-$d$,$C$?!W(B($B@<(B: $B
$B!U(B
Linux$B%+!<%M%k$N:F%3%s%Q%$%k$J$7$KMxMQ$G$-$k%"%/%;%92r@O(B/$B@)8B%b%8%e!<%k!V(BAKARI 1.0$B!W%j%j!<%9(B
(sourceforge.jp, 10/12)
$B!U(B
$B;0I)<+F0l$GO+:R1#$7(B
(JANJAN blog, 10/12)
$B!U(B
Malware abusing digital signatures: VB2010 presentation highlights
(Sophos, 10/12)
$B!U(B
Facebook $BJ}LL(B
$B!U(B
$B#N#H#K5-pJsO3$i$9!!A\::BP>]$N;~DEIw?FJ}$K(B (asahi.com, 10/9)$B!"(B
$B>pJsO3$($$$N#N#H#K5-
(asahi.com, 10/9)
$B!!%^%9%a%G%#%"$KNQM}8l$i$l$F$b$J$"(B:
$B!!4XO"(B:
$B!U(B
$BIO:$BP:v$HL7=b$9$k5~ET;T6u$-4L2s<}6X;_>rNc!&!&Bg1+$NCf!"H?BP%G%b(B (JANJAN blog, 10/9)
$B!U(B
$BFsBg@/E^HcH=$7$J$,$i<+$i$b>/?tGIGS=|(B $B$_$s$J$NE^$,!V<+8JCf$NE^!W$K!)!*(B
(JANJAN blog, 10/10)
$B!U(B
$BCf9qEv6I$K$h$kF|K\?M94B+;v7o!!:G8e$N0l?M5"9q(B
(JANJAN blog, 10/10)
$B!!%j%9%/BP:vC4Ev$NLr0w!"EZ20C#O/;a$O!V%W%m%8%'%/%H!J@P2HAq$G$N0d4~2=3XJ<4o=hM};v6H!K$N7QB3$OFq$7$$!W$HD|$a$-$C$?$h$&$9$@$C$?!#(B
$B!!4XO"(B: $BFb3UI\Bg?C41K
$BJ?@.#2#2G/#97n#1F|(B($B?e(B)$B!"Cf2Z?ML16&OB9qFn5~;T9Y30$G!"F|K\@/I\$rBeI=$7J?2,=(IWFb3UI\I{Bg?C$,=P@J$7$F!"F|CfN>9q@/I\$N9qL1!"(BOPCW $B!J2=3XJ<4o6X;_5!4X!K!"9q:]9q$N1JG/$NEXNO$r7P$F!"3+;O$5$l$k$H$$$&%a%C%;!<%8$rH/$9$k$3$H$rL\E*$H$7$F!"0d4~2=3XJ<4o$NGQ4~;v6H3+;O9T;v$r
$B!!$h$&$d$/$O$8$^$C$?$H$?$s$K$3$l$G$9$+$i!#Cf9q$O!"0d4~2=3XJ<4o=hM}$J$s$FK\Ev$O$7$F$[$7$/$J$$$N$G$O!#(B
$B!U(B
$B;3C+9d;K$N%^%s%9%j!^^!A%J!<%P%9$JLdBj$KBP$9$k%M%C%H$HCf9q9qL1$NH?1~(B
(Internet Watch, 10/12)
$B!U(B
$BLOJoIJ!&3$B1HG3H;6KI;_>rLs(B (ACTA) $B:G=*2q9g8e>rJ80F(B $BBh(B2$B>OBh(B5$B@a$NK]Lu$r8x3+$7$^$7$?!#(B
(MiAU, 10/11)
$B!U(B
$BAj
(techcrunch, 10/12)$B!#(B
Web $B%P%0$G$9$+!#(B
$B!U(B
$B!VIT@5$rK=$/8"Mx!W$O$I$3$^$GG'$a$i$l$k$+!)!!!A%/%8%iFy:[H=$h$j!A(B
(JANJAN blog, 10/10)
$B!!J9$/$H$3$m$K$h$l$P!"@D?9CO:[$N>.@n8-;J:[H=41!JCm#6!K$O!"$$$o$f$k!VN)@n%S%iG[I[;v7o!W$G$N9b:[:[H=41$N0l?M$@$C$?$i$7$/!"$I$&$d$i8D?M$d;TL1CDBN$,@/<#$K$+$+$o$k$h$&$J3hF0$O$($i$/5$$K$/$o$J$$$i$7$$!#!V%$%i%/$X$N<+1RBbGI8/!W$K$$$A$$$A;TL1$OH?BP$9$k$J!"!V?e;:D#$ND4::Ja7_!W$K$b8}=P$7$9$k$J!D$H$$$&$N$,K\2;$N$h$&$K$b;W$o$l$k!#(B
$B!!$&$o!D!D!#(B
$B!!$5$F!"9V1i2q$N$"$H$K$O:)?F2q$b;}$?$l$?$,!"$=$3$G!R%/%8%iFy:[H=!SHo9pB&BeM}?M$G$"$k3$EOJ[8n;N$h$j!"6C$/$3$H$,L@$+$5$l$?!#(B10$B7n#9F|8=:_!"Ho9p?M$N$b$H$K!"@D?9CO:[$NH=7hJ8$,FO$$$F$$$J$$$H$$$&$N$@!#(B
$B!!!V$h$C$]$IH=7hJ8$rFI$_JV$7$F!"$=$NFbMF$N0-$5$+$i!"H=7hJ8$r=q$-D>$7$F$$$k$N$G$O$J$$$+!)!W$H$$$&$N$,!"$=$N>l$G=P$?>iCL$H$bK\Ev$H$b$D$+$J$$@bL@$G$"$C$?$,!"DL>o$J$i!"MbF|$K$OAwIU$5$l$k$O$:$NH=7hJ8$,:[H=$NEv;ve$bAw$i$l$FMh$J$$$H$$$&$N$O!"$I$&$$$&$3$H$J$N$@$m$&$+(B($B0l@b$K$O(B11$B7n$KAwIUM=Dj$H$$$&OC$b$"$k$i$7$$(B)$B!#(B
$B!!$^$?!"A\::$,=*N;$7$F8xH=$,;O$^$C$F$b!"8!;!$OET9g$N$h$$>Z5r$7$+3+<($;$:!"%Z!<%8$N=EMW$JItJ,$,Gr$/%^%9%-%s%0$5$l$F$$$?$j!"$b$C$H$R$I$$>l9g$O;qNA$NESCf$,2?%Z!<%8$K$b$o$?$C$FHt$s$G$$$?$j$9$k>l9g$b$"$C$?$H$$$&!#(B
$B!!$5$i$K!"3$EOJ[8n;N$O!"D4=q$,3+<($5$l$J$$>uBV$G!"H?BP?RLd$r$7$J$1$l$P$J$i$J$$$3$H$b$"$C$?$=$&$G!"F1J[8n;N$+$i$O!V8x@5$J:[H=$N$?$a$K$O!"$9$Y$F$N>Z5r$r>/$J$/$H$b:[H=Ev;vZ5r$r1#$7$F$$$?$3$H$,$"$H$G$o$+$k$H!"$=$N$3$H$@$1$G8!;!41$,D(2|$NBP>]!"0-$/$9$l$P?&$r<:$&$h$&$J$3$H$^$G$"$k$N$K!"F|K\$OK!Dn$G$N5DO@$bCY$l$F$$$k$7!"8x@5$J:[H=$N%k!<%k$bBg$-$/CY$l$F$$$k!W$H$$$&
$B!!$3$l$,$$$D$b$N8!;!$N$d$j$/$A!#$I$3$>$N(B FD $BCK$@$1$,FC
$B!U(B
Wireshark 1.4.1
$B$,=P$F$$$^$9!#(B
$B!U(B
$B;Y1g5!4X$NDIJ|$GBg$-$J1F6A!'%=%^%j%"(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/9)
$B!U(B
$BE}0l6(2q!JE}0l652q!K9gF17k:'<0%$%s%?!<%M%C%HCf7Q%j%]!<%H(B
($B$d$dF|4)%+%k%H?7J9(B, 10/10)
$B!U(B
$B1Q9q<0;v7oJsF;!!(B
$B$J$<$K$3$@$o$k$N$+(B
($BJ8i:=U=)(B) $B$H$$$&=q@R$,$"$k$=$&$G!#(B
$B!!4XO"(B: $B=jJQ$o$l$P?7J9$bJQ$o$k!#(B ($B1Q9q%K%e!<%9%@%$%8%'%9%H(B, 2008.03.13)$B!#(B
$B%9%&%'!<%G%s<0;v7oJsF;!!$J$A0$r=P$5$J$$$N$+!#(B
$B%?%V%m%$%I;f!"!V%"%U%H%s!&%V%i!<%G%C%H!W$O!"F19q$G:G$b2a7c$J?7J9$H$7$FCN$i$l$k!#1Q9q$N!V%6!&%5%s!W$N$h$&$JB8:_$G$"$j!"It?t$bLs(B40$BK|It$H9qFb:GBg$@!#(B
$B%d%s!&%X%j%sJT=86IA0$d$@!#$?$@$7!"F1;f$N;v7oJsF;$O!"1Q9q$dF|K\$N>o<1$H$OAjEv$K7|$1N%$l$F$$$k!#$J$<$J$i!"$3$N%?%V%m%$%I;f$,;v7o4X78$d4i
$BF1;f$K8B$i$:!"$+$D$F!"%9%H%C%/%[%k%`$N39O)$G%Q%k%a85$rJsF;$7$J$+$C$?!#$=$3$^$GE0Dl$7$F$$$k$N$@!#%X%j%sJT=86I
$B!VMF5?
-
Microsoft 2010 $BG/(B 9 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!L@F|$K$O(B 10 $B7nJ,$N(B patch $B$,=P$k$H$$$&F|$K$h$&$d$/!D!D!#(B
-
MS10-061 - $B6[5^(B:
$B0u:~%9%W!<%i!<(B $B%5!<%S%9$N@H
-
$B!!(BWindows XP / Server 2003 / Vista / Server 2008 / 7 / Server 2008 R2 $B$K7g4Y!#0u:~%9%W!<%i!<(B $B%5!<%S%9$K7g4Y$,$"$j!"96N,0u:~%j%/%(%9%H$K$h$C$FG$0U$N%3!<%I$,Z$G$N967b$,2DG=!"(B
$BB>$N(B Windows $B$G$O(B local user $B$K$h$k8"8B>e>:$,2DG=!#(B
CVE-2010-2729
-
MS10-062 - $B6[5^(B:
MPEG-4 $B%3!<%G%C%/$N@H
-
$B!!(BWindows XP / Server 2003 / Vista / Server 2008 $B$K7g4Y!#(B
$B!V(BMPEG-4 $B%S%G%*(B $B%G%3!<%I$K;HMQ$5$l$F$$$k(B MPEG-4 $B%3!<%G%C%/!W$K7g4Y$,$"$j!"(B
$B96N,%a%G%#%"%U%!%$%k$K$h$C$FG$0U$N%3!<%I$,CVE-2010-0818
-
MS10-063 - $B6[5^(B:
Unicode $B%9%/%j%W%H(B $B%W%m%;%C%5$N@H
-
$B!!(BWindows XP / Server 2003 / Vista / Server 2008$B!"(B
Office XP / 2003 / 2007 $B$K7g4Y!#(B
$B!V(BUniscribe $B$H$b8F$P$l$F$$$k?7$7$$(B Unicode $B%9%/%j%W%H(B $B%W%m%;%C%5(B (USP10.DLL)$B!W$K7g4Y$,$"$j!"96N,(B OpenType $B%U%)%s%H$r4^$s$@96N,J8=q%U%!%$%k$r3+$/$HG$0U$N%3!<%I$,CVE-2010-2738
-
MS10-064 - $B6[5^(B:
Microsoft Outlook $B$N@H
-
$B!!(BOutlook 2002 / 2003 / 2007 $B$K7g4Y!#(BOutlook $B$K$*$1$kEE;R%a!<%k$N=hM}$K7g4Y$,$"$j!"96N,EE;R%a!<%k$K$h$C$FG$0U$N%3!<%I$,CVE-2010-2728 $B!#(B
$B$?$@$7!"(B
-
MS10-065 - $B=EMW(B:
Microsoft $B%$%s%?!<%M%C%H(B $B%$%s%U%)%a!<%7%g%s(B $B%5!<%S%9(B (IIS) $B$N@H
-
$B!!(BIIS 5.1 / 6.0 / 7.0 / 7.5 $B$K(B 3 $B$D$N7g4Y!#(B
IIS $B$N7+$jJV$5$l$?%Q%i%a!<%?!<(B $B%j%/%(%9%H$N%5!<%S%95qH]$N@HCVE-2010-1899
IIS 5.1 / 6.0 / 7.0 / 7.5 $B$K7g4Y!#(B
ASP $B%9%/%j%W%H=hM}$K7g4Y$,$"$j!"(B.asp $B$X$N96N,%j%/%(%9%H$K$h$C$F(B stack overflow $B$,H/@8!"(BIIS $B$,1~Ez$rDd;_$9$k!#(B
$B%j%/%(%9%H(B $B%X%C%@!<$N%P%C%U%!!<(B $B%*!<%P!<%U%m!<$N@HCVE-2010-2730
IIS 7.5 $B$K7g4Y!#(BFastCGI $B$,M-8z$J>l9g$N%j%/%(%9%H%X%C%@!<$N=hM}$K7g4Y$,$"$j!"(Bremote $B$+$iG$0U$N%3!<%I$r
$B%G%#%l%/%H%jG'>Z$N2sHr$N@HCVE-2010-2731
IIS 5.1 $B$K7g4Y!#(BURL $B$N2r@O$K$*$$$F7g4Y$,$"$j!"96N,%j%/%(%9%H$K$h$C$F!"G'>Z$,I,MW$J$O$:$N%Z!<%8$KL5G'>Z$G%"%/%;%9$G$-$k!#(B
-
MS10-066 - $B=EMW(B:
$B%j%b!<%H(B $B%W%m%7!<%8%c!<(B $B%3!<%k$N@H
-
$B!!(BWindows XP / Server 2003 $B$K7g4Y!#(BRPC $B%/%i%$%"%s%H$K$*$1$k(B RPC $B1~Ez$N2r@O$K$*$1$k%a%b%j3d$j$"$F$K7g4Y$,$"$j!"96N,(B RPC $B1~Ez$K$h$C$FG$0U$N%3!<%I$rCVE-2010-2567
-
MS10-067 - $B=EMW(B:
$B%o!<%I%Q%C%I$N%F%-%9%H(B $B%3%s%P!<%?!<$N@H
-
$B!!(BWindows XP / Server 2003 $B$K7g4Y!#%o!<%I%Q%C%I$N(B Word 97 $B%F%-%9%H%3%s%P!<%?!<$K7g4Y$,$"$j!"96N,J8=q%U%!%$%k$r3+$/$HG$0U$N%3!<%I$rCVE-2010-2563
-
MS10-068 - $B=EMW(B:
Local Security Authority Subsystem Service (LSASS) $B$N@H:3J$5$l$k(B (983539)
-
$B!!(BWindows XP / Server 2003 / Vista (SP2 $B$N$_(B) / Server 2008 / 7
$B$K7g4Y!#96N,(B LSASS $B%a%C%;!<%8$K$*$$$F!"8"8B>e>:$,2DG=!#(B
CVE-2010-0820
-
MS10-069 - $B=EMW(B:
Windows $B%/%i%$%"%s%H(B/$B%5!<%P!<(B $B%i%s%?%$%`(B $B%5%V%7%9%F%`$N@H:3J$5$l$k(B (2121546)
-
$B!!(BWindows XP / Server 2003 $B$K7g4Y!#(B
CSRSS $B$N%a%b%j4IM}$K7g4Y$,$"$j!"(Blocal user $B$K$h$k8"8B>e>:$,2DG=!#(B
CVE-2010-1891 $B!#(B
-
APSA10-02: Security Advisory for Adobe Reader and Acrobat
-
$B!!(BAdobe Patches Vulnerabilities
(Symantec, 2010.10.12)$B!#(BJavaScript $B$rL58z$K$7$F$b967b%3!<%I$,5/F0$5$l$k96N,(B PDF $B%U%!%$%k$,=P2s$C$F$$$k$=$&$G$9!#(B
-
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (2269637)
$B0BA4$G$J$$%i%$%V%i%j$N%m!<%I$K$h$j!"%j%b!<%H$G%3!<%I$,
-
Stuxnet worm 'targeted high-value Iranian assets'
-
$B!!(BLhaplus 1.57 $B0JA0$K7g4Y!#(BDLL $B8!:w%Q%9$N07$$$K7g4Y$,$"$j!"0U?^$7$J$$(B DLL $B$rFI$_9~$s$G$7$^$&!#(BCVE-2010-2368
$B!!(BLhaplus 1.58 $B$G=$@5$5$l$F$$$k!#(B$B%@%&%s%m!<%I(B$B!#(B
2010.10.15 $BDI5-(B:
$B!!(BJVN#18774708:
Lhaplus $B$K$*$1$k
(JVN, 2010.10.15)$B!#$"$o$;$F(B Lhaplus 1.58 $B$G=$@5$5$l$F$$$k!#:G?7HG$O(B Lhaplus 1.59$B!#(B
$B!!(BLhasa 0.19 $B0JA0$K7g4Y!#%U%!%$%k8!:w%Q%9$N07$$$K7g4Y$,$"$j!"0U?^$7$J$$CVE-2010-2369
$B!!(BLhasa 0.20 $B$G=$@5$5$l$F$$$k!#(B$B%@%&%s%m!<%I(B$B!#(B
$B!U(B
$B!V@/<#
($B=54)!&>e?yN4(B, 9/30)
$B!U(B
SORBS.NET - email RBL issues
(SANS ISC, 10/7)
$B!U(B
$B%U%!%$%k6&M-%=%U%H!V(BPerfect Dark$B!W$G%"%K%a!V$_$D$I$b$(!W$J$I$rG[?.$7$?=w$rBaJa(B
(gigazine, 10/8)
$B!U(B
$B!ZM9JXIT@5![FCA\8!;v$ND4=q$r:NMQ$;$:!!!VB);R$rBaJa$9$k$>!W6
($B;:7P(B, 10/8)$B!"(B
$B!ZM9JXIT@5![BaJa$A$i$D$+$;!D6 ($B;:7P(B, 10/8)$B!#$J$<$+;:7P$OJsF;$7$F$^$;$s$,!"(B
$B:G9b8!!"6Z$X(B $BM9JX@)EY0-MQ;v7o(B
($BJ!0f?7J9(B, 10/8) $B$J$I$r8+$k$H!">eEDIR@28!;v!J#3#7!K!a8=K!L3>J7:;v6IIU!a$H=q$+$l$F$$$k!#(B
$B!U(B
$B%M%C%H$G%K%e!<%9(B
($BCEJ[8n;N$N;vL3<<(B, 10/8)$B!#(B
$BBg:eI\7YEl=p7:;v2]$N7YItJd!J#3#4!K$H=d::ItD9!J#3#1!K$,<+Gr6/MW$+(B
$B$N7o$N$D$E$-!#(B
$B!!4XO"(B: $B!V2%$k$>!W$H<+GrGw$kO?2;8xI=(B $BBg:e!"J[8nCD$,9pAJ$X(B
($BJ!0f?7J9(B, 10/7)
$B!U(B
$B!V;R5\pt$,$s%o%/%A%s!W$X$N5?Ld!'=EBg$JI{:nMQ(B
($B$O$?$H$b$3%V%m%0(B, 5/16)
$B%5!<%P%j%C%/%9$rF|K\?M$KE,MQ$7$F$bL50UL#$G$O!"$H$$$&OC!#(B
$B$9$J$o$A!"%5!<%P%j%C%/%9$O!"(B16$B7?$H(B18$B7?$N(BHPV$B$KBP$7$F$N$_M=KI8z2L$,G'$a$i$l$k$K$9$.$:!"$7$+$bM=KI8z2L$N;}B34|4V$O3NN)$7$F$$$J$$!J$H$$$&$h$j$b2?G/$b@h$N$3$H$O$^$@$o$+$i$J$$!K$N$G$9!#:GD9(B6.4$BG/$NM=KI8z2L4|4V$,$"$C$?$H$NJs9p$,$"$k$,$3$l$K$O99$J$kD4::$,I,MW$G$"$k$3$H!"$^$?!"A06nIBJQ$NM=KI$K$D$$$F$O(B53%$B$NM-8zN($G$"$k$3$H$r!"#F#D#A$bG'$a$F$$$^$9!#(B
$B$H$3$m$,!"F|K\$G8+Ev0c$$$NHp$j$rLH$l$J$$:GBg$NM}M3$O!"?te!"%5!<%P%j%C%/%9$r?d>)$7>.3X@8$K=8CD@\
$B!U(B
PCI SSC$B!"0E9f2=$K4X$9$k%,%$%@%s%9!&%Z!<%Q!<$J$I$rH/I=!!(B
$B%]%$%s%H%D!<%]%$%s%H0E9f2=$H(BEMV$B5;=Q$K4X$9$k(BPCI SSC$B$N9M$(J}$r@bL@(B
(ComputerWorld.jp, 10/7)
$B!U(B
$B!V>.Bt;a5/AJ5D7h$OLdBj$"$j!W6?86J[8n;N$,;XE&(B
($B%K%3%K%3%K%e!<%9(B, 10/6)
$B858!;v$G$b$"$k6?86J[8n;N$O!"5D7h=q$N%3%T!<$r]$H$J$C$F$$$J$+$C$?HH:a;v]$K4^$^$l$F$$$k$N$O!VHs>o$KLdBj!W!V$*$+$7$$!W$HOC$7!"(B
$B>.Bt;a$r!V5/AJ$9$Y$-!W$H$7$??3::2q$NH=CG$K6/$$5?Ld$rDh$7$^$7$?!#(B
$B!J6?86J[8n;N$N@bL@$O!"HVAH3+;O8e(B26$BJ,(B20$BIC$4$m$+$iLs(B5$BJ,4V!K(B
$B6?86J[8n;N$N;I'=01!5D0w$b(B
$B5DO@$rDL$8$F!":#2s$N5D7h$KLdBj$,$"$k$3$H$rG'$a$k$+$?$A$H$J$j$^$7$?!#(B
$B!!5D7h=q$N%3%T!<$b7G:\$5$l$F$$$k(B: 1$BEYL\(B$B!"(B
2$BEYL\(B
$B!!4XO"(B:
$B6[5^FCHV!VE0DlF$O@!*L1.Bt;a6/@)5/AJ$rLd$&!W(B ($B%K%3%K%3@8J|Aw(B, 10/6)$B!#%?%$%`%7%U%H;kD02DG=!#(B
$B!N6[5^5-.Bt;a$KBP$9$k8!;!?3::2q$N5/AJAjEv5D7h$OL58z$@!*(B
(The Journal, 10/5)
$B!N6[5^5-.Bt;a$K<-?&$r5a$a$k (The Journal, 10/5)
$B!J5D7h$O!K$"$/$^$G!V:[H==j$K:G8e$K:G=*E*$JH=CG$r5a$a$k!W$H$$$&.Bt;a$K!V@/<#E*$K@UG$$r$H$k$Y$-!W$@$H$+!V5D0w<-?&$9$Y$-!W$@$H$+!VE^$H$7$F=|L>$9$Y$-!W$H$$$&$3$H$r8@$&$Y$-$G$O$J$$!#$=$l$O$*$h$=8!;!?3::2q@)EY$N
$B!X!V8+<1!W$d!VK!E*$J%;%s%9!W$,5?$o$l!Y$kNc(B:
$B#1#1?M$NA`$j?M7A$?$A(B ($B$-$C$3$N%V%m%0(B, 10/7)$B!#(B2 $B2s$N!V5/AJAjEv!W$r=P$7$?8!;!?3::2q$NG/Np9=@.$,0[>o$G$"$k!"$H$$$&OC$H!"6?86;a$,>e5-$G;XE&$7$F$$$kOC!#(B
$B>.Bt;a$N!V@/<#$H%+%M!WLdBj$OB8:_$7$J$$(B
($B1JEDD.0[J9(B, 9/2)
$BN%E^!&<-?&$rH]Dj$7$?>.Bt;a$N!IL5
($B=54)!&>e?yN4(B, 10/7)
$B>.Bt;a9pH/$NCDBN$H$O!!!VJ]
(asahi.com, 10/8)$B!#!V??
$B!U(B
Inside Adobe Reader Protected Mode - Part 1 - Design
(Adobe, 10/5)$B!#(BAdobe Reader 10 $B$KEc:\$5$l$kM=Dj$N(B sandbox $B$NOC!#(B
$B!U(B
$B%^%+%U%#!<$H%7%H%j%C%/%9!"2>A[%G%9%/%H%C%W%;%-%e%j%F%#$K$*$1$k@oN,E*Ds7H$N@.2L!"Bh(B1$BCJ3,$rH/I=!!(B
Citrix XenDesktop$B8~$1(BMcAfee MOVE$B$r%j%j!<%9!"(B
$BBh(B2$BCJ3,$O%;%-%e%j%F%#$r(BXenClient$B%O%$%Q!<%P%$%6!<$KD>@\E}9g(B
(Citrix, 10/8)$B!#$=$s$J$3$H$h$j(B VSE $B$rBP1~$5$;$F$[$7$$$G$9!#(B
$BBP1~$7$F$J$$$N!"(BCitrix $B$@$1$G$9$h(B$B!#(B
$B!U(B
$BD94|2=$9$k?)NH4m5!$X$NBP:v6/2=$r3F9q$KMW@A(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/7)$B!#(B
$B!X@$3&?)NHIT0BGr=q(B2010$B!Y!J(BThe State of Food Insecurity in the World 2010$B!K(B$B!#(B
$B?)NH4m5!$OB3$$$F$$$k!#(B
$B!!F|K\$G$O1_9b$N$?$a$K@$3&$G$O$^$@?)NH2A3J$,9b$$?e=`$@$H$$$&$3$H$,
$B!U(B
$BJ#?t$N(BJoomla!$B%5%$%H$K$*$$$F!"(Bjjencode$B$r;HMQ$7$F5-9f$@$1$KFqFI2=$7$?(BJavaScript$B$rCmF~$9$k967b(B
($BMU$C$QF|5-(B, 10/8)
jjencode$B$K$h$k5-9f2=(BJavaScript$B$N%3!<%I$O!"(BIE6$B!"(BIE7$B$*$h$S(BIE8($B%I%-%e%a%s%H%b!<%I$,(BIE8$BI8=`%b!<%I$G$J$$>l9g(B)$B$K%3!<%I$,F0:n$7$^$;$s!#(B
$B!!4XO"(B: $B%$%?%j%"$K$*$1$k%V%i%&%6%7%'%"(B (StarCounter $B$h$j0zMQ(B)
$B!U(B
Windows$B$G7Z2w$KF0:n$9$k%U%j!<$N(BFTPS$B%5!<%P!V(BCerberus FTP Server$B!W(B
(gigazine, 10/8)$B!#(BProfessional $BHG$G$O(B SFTP $B$K$bBP1~$7$F$$$k$=$&$G$9!#(B
$B3F%(%G%#%7%g%s$N0c$$(B$B!#(B
$B!!4XO"(B: List of FTP server software
(Wikipedia)
$B!U(B
$BIwNOH/EE$NA{2;!&Dc<~GH2;!"#6#4$+=j$G6l>p(B
($BFIGd(B, 10/7)$B!"(B
$BIwNOH/EE;\@_#1#6!s$KA{2;$N6l>p!!4D6->JD4::(B
(47news.jp, 10/7)
$B!!4D6->J$O#7F|!"A49q#3#8#9%+=j$NIwNOH/EE;\@_$N$&$A=;L1$+$iA{2;$K4X$9$k6l>p$,4s$;$i$l$?$3$H$,$"$k$N$O#1#6!s$KEv$?$k#6#4;\@_$G!"$3$N$&$A#2#5;\@_$O:#G/#47n#1F|;~E@$G$b6l>p$,B3$$$F$$$?$HH/I=$7$?!#(B
($BCfN,(B)
$B!!$3$N$&$A#3#9;\@_$G$O!"@_Hw$N2~NI$dAaD+Lk4V$N1?E>Dd;_$J$I$NBP1~$rp$,2r>C$5$l$F$$$k!#(B
$B!!(B25$B;\@_$K$*$1$k6l>p$K$D$$$F$OBP1~$,:$Fq$H$$$&$3$H$G$9$+$M!D!D!#(B
$B4XO"(B:
$B!!$&$o!"$b$&$=$s$J5(@a$@$h!D!D!#$7$+$b(B 16 $B8D$b$"$k$h(B ($B6[5^(B x 4$B!"=EMW(B x 10$B!"7Y9p(B x 2) $B!#(BOffice $B$b4^$^$l$F$k$J$"!#(BOffice 2010 $B$d(B Mac $BHG$b4^$^$l$F$k!#(B
$B!U(B
$BBg:eI\7YEl=p7:;v2]$N7YItJd!J#3#4!K$H=d::ItD9!J#3#1!K$,<+Gr6/MW$+(B
(various, 10/7)
$B!!$3$N7o!"CEJ[8n;N$N$H$3$m$_$?$$!#(B
$B!!4XO"(B:
$B!U(B
$B!V1&Mc$N@oAhE8!W$3$H!V$b$&$R$H$D$N@oAhE8!W$r
(JANJAN blog, 8/20)$B!#(B
$B6=L#?<$$!#(B
$B!!4XO"(B: $B!V:8Mc$N@oAhE8!W$3$H!VJ?OB$N$?$a$N@oAhE8!W
(JANJAN blog, 10/6)$B!#(B
$B!U(B
$B@8J*B?MM@-%U%)!<%i%`!"(BMOP5$BJs9p2q(B(10/10,10/11,10/16)
(JANJAN blog, 10/7)
$B%]%9%?!<$J$I$G$O!V$?$/$5$s$N$$$N$A!W$H$$$&%$%a!<%8$G@kEA$r$5$l$F$$$^$9$,!"(B
$Be$7$F$-$F$$$k!"0dEA;RAH$_49$(:nJ*$,CO0h$r1x@w$7$?>l9g$K$I$&$9$k$+!"$J$I$N!"$H$F$b@/<#E*$J2q5D$G$b$"$j$^$9!#(B
$B!U(B
DNSSEC $BOC(B
$B!U(B
$BJF%i%H%,!<%9Bg3X(B1$BG/@8CK;R!"CK@-$H$N@-9T0Y$r%k!<%`%a%$%H$K%9%H%j!<%`G[?.$5$l<+;&(B
($B$_$d$-$AF|5-(B, 10/1)$B!"(B
$BF15i@8$N@-9T0Y$r%M%C%HG[?.$7$F<+;&$5$;$?%i%H%,!<%9Bg@8!"D(Lr(B10$BG/$N7:$KD>LL$+(B ($B$_$d$-$AF|5-(B, 10/7)
$B!U(B
$BJ$r8#@)(B (asahi.com, 10/6)
$B!U(B
$B8!;!8+D>$7$N!V8!F$2q5D!W6a$/@_CV$X!!K!Aj;pLd5!4X(B
(asahi.com, 10/6)
$B!U(B
$B3$$N8~$3$&$N!H%;%-%e%j%F%#!I!!(B
$BBh(B49$B2s!'4Z9q%$%s%?!<%M%C%H@)$,8D?M>pJsN.=P$N
(Internet Watch, 10/7)
$B!U(B
$B%M%P%@3KCO0h$r7YHw$9$k<+N'7?%m%\%C%H(B($BF02h(B)
(WIRED VISION, 10/6)
$B!U(B
$BEl5~1_#8#21_Bf8eH>!"F|7PJ?6Q$O>.I}$JCMF0$-(B
(asahi.com, 10/7)$B!#$1$C$-$g$/(B 82 $B1_Bf$J$s$@!#(B
$B!U(B
$B#N#A#T#O73$N%Q%-%9%?%sJ<967b$O!V2a<:!W!!;JNa41$,
(asahi.com, 10/7)$B!#(BNATO $B73$H%Q%-%9%?%s(B
$B$N$D$E$-!#(B
$B!U(B
PayPal$B!"6a$/%^%$%/%m%Z%$%a%s%H%5!<%S%93+;O$X(B - $B2;3Z!"%S%G%*!"%2!<%`$J$IA4%G%8%?%k%0%C%:$,BP>](B
(techcrunch, 10/7)
$B!U(B
$BJF5D2q!'%$%s%?!<%M%C%H8!1\K!0F!J(BCOICA$B!K$,Ds=P$5$l$k(B
(P2P$B$H$+$=$NJU$N$*OC(B, 10/7)$B!"(B
$B%"%a%j%+$N%$%s%?!<%M%C%H8!1\K!0F!V(BCOICA$B!W$C$F$J$K!)(B
($B$D$d$F$6%K%e!<%9(B, 10/4)
Q: $B$=$l$N$I$3$,$$$1$J$$$N!)(B
A: $B$&!<$s!"$=$l$O!V(BYouTube $B$C$FCx:n8"J]8n$5$l$?%3%s%F%s%D$,%a%$%s$@$m!W$H$C$F%3%s%F%s%D$rZL@$9$kI,MW$5$($J$/$J$k!#!V0lHL$N!W?M!9$,Cx:n8"?/32$N$?$a$K(B YouTube $B$r;H$C$F$$$k$H:[H==j$r@bF@$G$-$l$P!"(BYouTube $BA4BN$r%V%m%C%/$9$k$3$H$,$G$-$F$7$^$&!#(B
$B$5$i$K:[H==j$NL?Na$,$J$/$F$b!";JK!D941$NL?Na$@$1$G(B Web $B%5%$%H$O%V%i%C%/%j%9%H$K:\$C$F$7$^$&!#$=$7$FK!0F$O!";JK!D941$,;XDj$7$?%5%$%H$b%V%m%C%/$9$k$h$&(B ISP $B$K?d>)$7$F$$$k!#$?$H$(K!E*$JMW5a$,$J$$$H$7$F$b!"(BISP $B$K$O@/I\$N%V%i%C%/%j%9%H$r
$B!U(B
from JPCERT/CC
$B!U(B
$B8=CO$G8+$?Cf9q(BICT$B%;%-%e%j%F%#:G?7;v>p(B $BBh(B4$B2s!!>e3$$O%U%j!<%9%]%C%HE79q!*(B
($BF|7P(B IT Pro, 9/29)
$B!U(B
SQL$B%$%s%8%'%/%7%g%s967b$NGH(B
($BF|7P(B IT Pro, 9/30)
$B!U(B
CSIRT$BJ3F.5-(B $BBh(B11$B2s!!3ZE7$N!V(BRakuten-CERT$B!W!=!=4{B8$NBN@)$r@8$+$7$J$,$i9=C[!$30It4XO"AH?%$H$NO"7H$r6/2=(B
($BF|7P(B IT Pro, 10/4)
$B!U(B
$BAjCL7o?t
(so-net $B%;%-%e%j%F%#DL?.(B, 10/5)
$B!U(B
Adobe Flash, The Spy in Your Computer - Part 2
(ESET Threat Blog, 10/6)
You can find the details for the configuration file in a document that Adobe publishes at http://www.adobe.com/content/dam/Adobe/en/devnet/flash/articles/flash_player_admin_guide/flash_player_admin_guide.pdf
$B!!>e5-(B PDF $B%U%!%$%k$O(B Flash Player 10.1 $BBP1~HG$G$9$,!"(B
$B:#$N$H$3$mF|K\8l$K$J$C$F$$$k$N$O!"(BFlash Player 10.0 $BBP1~HG$_$?$$(B:
Flash Player 10$BBP1~(BAdobe Flash Player$B4IM}%,%$%I(B
(Adobe)
For an example, I created a configuration file with the following content:
LocalStorageLimit = 1
AssetCacheSize = 0
ThirdPartyStorage = 0
AssetCacheSize = 0
AutoUpdateInterval = 1
LegacyDomainMatching = 0
LocalFileLegacyAction = 0
This configuration stopped Disney, MTV, ESNP, and ABC (all defendants in privacy violation lawsuits) from writing LSOs to my hard drive. Sites, such as Disney were pretty unusable in terms of viewing graphic content. Sites like ABC broke in some, but not all cases.
$B!!>e5-%Q%i%a!<%?$O!"(BFlash Player 10$BBP1~(BAdobe Flash Player$B4IM}%,%$%I(B
(Adobe)
$B$K$b=P$F$/$k$b$N$P$+$j!#(B
$B!!(BPart 1 $B$O$3$A$i(B: Adobe Flash, The Spy in Your Computer \u2013 Part 1
(ESET Threat Blog, 10/6)
$B!U(B
$B$d$8$&$^%_%K%l%S%e!
($B2HEE(B Watch, 10/7)$B!#5$J,$O(B LOS ANGELS NOVEMBER 2019$B!#(B
$B!U(B
Soft Hyphen - A New URL Obfuscation Technique (Symantec, 10/7)$B!#(B­ $B$@$=$&$G$9!#(B
In HTML4 standards, the soft hyphen is represented as $B!H(B­$B!I(B. The shy character is ignored by many browsers (for example, Firefox 2 ignores this character), unlike in Microsoft Office documents and in a small number of browsers in which the shy character visible and is treated as a normal hyphen.
2010.10.08 $BDI5-(B:
$B!!F|K\8lHG(B: $B%=%U%H%O%$%U%s(B - URL $BITL@NF2=$N?7$?$J
($B%7%^%s%F%C%/(B, 10/7)
$B!!(BFoxit Reader 4.1.x $B0JA0$K7g4Y!#>\:YITL@$@$,!"2~cb$5$l$?!&:>>N$5$l$?EE;R=pL>$N07$$$K7g4Y$,$"$kLOMM!#(BFoxit Reader 4.2 $B$G=$@5$5$l$F$$$k!#(B
$B!U(B
$B9R6u5!$N%j%"%k%?%$%`Ht9T>pJs$O!V%;%-%e%j%F%#>e$N6<0R!W(B?
(slashdot.jp, 10/6)$B!#(B
$B4XO"(B: ADS-B$B$C$F2?$@$m$&$+!)(B (cfijapan.com)
$B!U(B
$B%J%$%8%'%j%"$N1tFG:R32$G?tI4?M$N;`K4(B
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 10/6)
$B!U(B
$B2,:j;TD9!!%7%9%F%`6H
($BCfF|?7J9(B, 10/5)
$B!!2,:j;T$+$i(B librahack $B;a$X$N
$B!U(B
$BF|4Z$N>pJs%;%-%e%j%F%#(B3$BCDBN$,Ds7H!"4k6H4V$NO"7H?d?J$7@$3&E83+L\;X$9(B
(Internet Watch, 10/6)
$B4Z9q$NCN<1>pJs%;%-%e%j%F%#;:6H6(2q!J(BKISIA$B!K!"FCDjHs1DMx3hF0K!?MF|K\%M%C%H%o!<%/%;%-%e%j%F%#6(2q!J(BJNSA$B!K!"FCDjHs1DMx3hF0K!?MF|K\%;%-%e%j%F%#4F::6(2q!J(BJASA$B!K$N(B3$BCDBN$O(B6$BF|!">pJs%;%-%e%j%F%#;v6H$GAj8_6(NO$9$k$3$H$K9g0U$7!"7@Ls$rDy7k$7$?!#(B
$B!U(B
$B%O%s%,%j!
($B5~ET?7J9(B, 10/6)
$B!U(B
$B!V%&%aNXLf%&%$%k%9$K4X$9$kBP:v8!F$2q!W$N3+:E$K$D$$$F(B
($BG@NS?e;:>J(B, 10/4)$B!#L@F|3+:E!#(B
$B!!4XO"(B: $B%&%aNXLf%&%$%k%9!J%W%i%`%]%C%/%9%&%$%k%9!K$K$h$k?"J*$NIB5$$NH/@8D4::$N7k2L$HBP1~>u67$K$D$$$F(B
($BG@NS?e;:>J(B, 7/23)$B!"(B
$B%W%i%`%]%C%/%9%&%$%k%9$N3NG'$K$D$$$F(B ($B<"2l8)(B, 6/16)
$B!!D9IM;T$G46@w$,3NG'$5$l$?%&%a$O!"El5~ET@DG_;T$N6H^MQ$N%&%a$NIDLZ$G$7$?!#(B
$B!U(B
$B8}D}1V!V@6>t9q!WI|5"$r?=@A!!9b5iOB5m$NM"=PI|3h$X(B
(asahi.com, 10/6)$B!"(B
$B9q:]=C1V;vL36I!J(BOIE$B!K$KBP$9$k8}D}1V@6>t%9%F!<%?%9$N2sI|$N$?$a$N?=@A$K$D$$$F(B
($BG@NS?e;:>J(B, 10/6)
$B!U(B
$B#T#B#S!"HVAHH/$NF}$,$s8!?GCf;_!V#2#0Be$G$O:,5r$J$7!W(B
(asahi.com, 10/6)$B!#$h$&$d$/$G$9$+!#(B
-
APSA10-02: Security Advisory for Adobe Reader and Acrobat
-
-
APSA10-03: Security Advisory for Flash Player
-
-
Stuxnet worm 'targeted high-value Iranian assets'
-
MS10-018 - $B6[5^(B:
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (980182)
$B!!(BIE8 XSS Filter$B$N;EMM$,HyL/$KJQ99$5$l$F$$$?!#(B
($BMU$C$QF|5-(B, 2010.10.04)$B!#(BMS10-018 $B$K4^$^$l$k(B XSS Filter $B$NJQ99$N7o!#(B
$B!!$"$H!"!V$"$H$GDI5-!W$H8@$$$J$,$i2?$b$d$C$F$J$+$C$?$N$G$d$C$F$*$/!#(B
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-0267
IE 6 / 7$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 3
$B%(%s%3!<%I8e$N>pJsO3$($$$N@HCVE-2010-0488
IE 5.01 / 6 / 7$B!#(B
$B>pJsO31L$r>7$/!#(B
Exploitability Index: 3
$B6%9g>uBV$N%a%b%jGKB;$N@HCVE-2010-0489
IE 5.01 / 6 / 7$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 2
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-0490
IE 6 / 7 / 8$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 3
HTML $B%*%V%8%'%/%H$N%a%b%jGKB;$N@HCVE-2010-0491
IE 5.01 / 6$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 1
HTML $B%*%V%8%'%/%H$N%a%b%jGKB;$N@HCVE-2010-0492
IE 8$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 1
HTML $B%(%l%a%s%H$N%/%m%9(B $B%I%a%$%s$N@HCVE-2010-0494
$B%j%b!<%H$+$i$N%3!<%IpJsO31L(B (IE 7 / 8) $B$r>7$/!#(B
Exploitability Index: 1
$B%a%b%jGKB;$N@HCVE-2010-0805
IE 5.01 / 6$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 2
$B=i4|2=$5$l$F$$$J$$%a%b%jGKB;$N@HCVE-2010-0806
IE 6 / 7$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 1
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (981374)
Internet Explorer $B$N@H
$B$N7o!#(B
HTML $B%l%s%@%j%s%0$N%a%b%jGKB;$N@HCVE-2010-0807
IE 7$B!#(B
$B%j%b!<%H$+$i$N%3!<%I7$/!#(B
Exploitability Index: 1
$B!U(B
$BF|N)(BAP$B$,!V;`$KMM;n83!W$r$9$kM}M3(B
($BF|7P(B IT Pro, 9/29)
$B!U(B
$B4Z9q652JIt(B(MEST)$B$NEE;R?^=q4[$K%/%i%C%/%W%m%0%i%`!"(B636$BK|?M$N8D?M>pJs$,%"%/%;%92DG=$K(B
(slashdot.jp, 10/2)$B!"(B
$B0JA0$b(B2300$BK|?MJ,O31L$7$F$?$h$M(B
(slashdot.jp, 10/4)
$B$b$&4Z9q$K$OJ]8n$9$Y$-8D?M>pJs$J$s$F$J$$$s$8$c$J$$$N!#(B
$B!U(B
$B!VQM:a$r8l$k!W9bCN=82q!J(B10$B7n(B17$BF|!K(B (JANJAN blog, 9/26)$B!#(B
2010.10.17$B!"9bCN8)9bCN;T!"L5NA!#(B
$B!U(B
$B!V9TF0$9$kJ]
(JANJAN blog, 9/26)
$B$=$7$F!"
$B!!$o$?$7$N$h$&$JEv;~$O@8$^$l$F$$$J$$
$B!U(B
$B%h!<%m%C%Q$K%F%m7W2h(B?
$B!U(B
NATO $B73$H%Q%-%9%?%s(B
$B!U(B
ZBot gang suspects arrested in the Ukraine
(Sophos, 10/1)
$B!U(B
ACTA$B5v$9$^$8!*L1rLs(B (P2P$B$H$+$=$NJU$N$*OC(B, 9/29)
$B!U(B
$B%U%i%s%9HG%9%j!<%9%H%i%$%/K!(B Hadopi$B;OF0!"?tI4K|$N%f!<%6$,%?!<%2%C%H$K!)(B
(P2P$B$H$+$=$NJU$N$*OC(B, 9/25)
$B!U(B
$BCOJ}%i%8%*6I!'E_$N;~Be!!0&CN9q:]J|Aw!"=i$NLH5vJV>e!!9-9p<}F~!"%j%9%J!<8:$G(B
($BKhF|(B, 10/1)$B!#=*$j$N$O$8$^$j!#(B
$B!U(B
$B9q@*D4::%*%s%i%$%s(B
($B?eL57n$P$1$i$N$($SF|5-(B, 9/24)
$B!VK\?M$N;E;v$NFbMF!W$H$$$&9`L\$K!V!D!D;~$K$O%U%)!<%`$K(B "><s>test $B$J$I$HF~NO$9$k;E;v!W$J$I$H=q$$$F$_$?$H$3$m!"3NG'2hLL$GBG$A>C$7@~$,I=<($5$l$k$H$$$&8=>]$KAx6x!#?'$a$-N)$A$^$7$?$,!"(B<script> $B$O$&$^$/$$$+$:!#$I$&$b!"D9$$1Q?t;z$,@^$jJV$5$J$$$h$&$K(B3$BJ8;z$4$H$K(B <wbr/> $B$rA^F~$7$F$$$k$h$&$G$9$M!#(B<s>$B$O$A$g$&$I(B3$BJ8;z$J$N$GBG$A>C$7@~$O%.%j%.%jH/F0$7$^$9$,!"$=$l$h$jD9$$%?%0$O2u$l$k$N$G!"G$0U$N%9%/%j%W%H$O
$B!U(B
$B9q@*D4::$NF1@-%+%C%W%k$KBP$9$k07$$(B
(togetter)$B!#4V0c$C$?E}7W$,$J$5$l$k$3$H$,$"$i$+$8$a7h$^$C$F$$$k$H$$$&;v
$B!U(B
$B!V$1$$$*$s!*!W$NJ|2]8e%F%#!<%?%$%`$,9q@*D4::$r%"%T!<%k$9$k%i%8%*(BCM$B$,8x3+Cf(B
(gigazine, 10/1)
$B$=$7$F(B10$B7n(B1$BF|$+$i$O4|4VCf(BCM$B$,N.$l$F$$$^$9!#D4::$rCN$i$J$+$C$?M#$dN'$,$9$G$K5-F~$r=*$($?0lJ}$G!"_:$,%W%i%$%P%7!<$N$3$H$r5$$K$7$F$$$k!D$H$$$&FbMF$G$9!#(B
$B!!!VIu$,$G$-$k$7!"M9Aw$G$b$$$$$N$h!W!#(BB-2$B!!J?@.(B22$BG/9q@*D4::$ND4::J}K!$O!"$3$l$^$G$HHf$Y$F$I$N$h$&$KJQ$o$k$N$G$9$+(B
($BAmL3>JE}7W6I(B) $B$K$"$k!"$3$l$G$9$M(B:
$B!!J?@.(B22$BG/9q@*D4::$G$O!"$G$-$k$@$12sEz$7$d$9$/Ds=P$7$d$9$$D4::$H$9$k$?$a!"
(1)$B!!D4::I<$NIuF~Ds=PJ}<0$NA4LLE*$JF3F~(B
(2)$B!!M9Aw$GDs=P$G$-$kJ}<0$NF3F~!J@$BS$,A*Br$9$kJ}<0!K(B
(3)$B!!0lIt$N%b%G%kCO0h$K$*$$$F%$%s%?!<%M%C%H$K$h$k2sEzJ}<0$NF3F~!J@$BS$,A*Br$9$kJ}<0!K(B
$B!!$J$*!"(B$B0lIt$N%b%G%kCO0h(B = $BEl5~ET(B$B!"$@$=$&$G$9!#(B
$B!V$1$$$*$s!*!W%-%c%i%/%?!<$r;HMQ$7$?%]%9%?!<$,D%$j=P$5$l$F$$$k$H$$$&$3$H$G!"
$B!!$A$J$_$K!"(B$BN6Bg@%ED3X$B$O!"(B48 $B;~4V0JFb$K>CLG$7$^$7$?!#(Bsigh.
$B!U(B
Google$B!"(BURL$BC;=L%5!<%S%9!V(Bgoo.gl$B!W$r0lHL8x3+(B
(Internet Watch, 10/1)$B!#(B
$B$D$/$C$F$_$?(B: goo.gl/T8ZN$B!#(B
$B%5!<%S%9$K$O%^%k%&%'%"$d%U%#%C%7%s%0!"%9%Q%`$J$I$KBP$9$kJ]8n5!G=$bHw$($i$l$F$$$k$H$$$&!#(B
$B!!$I$&$$$&0UL#$J$s$@$m$&!#(B
Google URL Shortener Gets a Website
(Google Social Web blog, 9/30)
$B$K$O$3$&$"$k(B:
You also know that when you click a goo.gl shortened URL, you$B!G(Bre protected against malware, phishing and spam using the same industry-leading technology we use in search and other products.($BCfN,(B)
Security: We$B!G(Bve added automatic spam detection based on the same type of filtering technology we use in Gmail.
$B!!(BGmail $B$G;H$o$l$F$$$k$b$N$HF1MM$N%U%#%k%?%j%s%05!9=$K4p$E$/<+F0(B spam $B8!=P$,9T$o$l$F$$$k$=$&$G!#Ev3:C;=L(B URL $B$,(B spam $B$d%^%k%&%'%"!"%U%#%C%7%s%0$K;H$o$l$F$$$k$HH=CG$5$l$k$H<+F0E*$KL58z2=$5$l$k!"$N$+$J!#(B
$B!!4XO"(B: Goo.gl$B$N$9$4$$1#$75!G=$,$I$N%j%s%/$b=V;~$K(BQR$B%3!<%I$KJQ$($k(B
(techcrunch, 10/1)
Google$B$N(BMatt Cutts$B$,$D$$@h$[$I(B $B%D%$!<%H$7$?$H$3$m$K$h$k$H!"(Bgoo.gl$B$N(BURL$B$N8e$K!V(B.qr$B!W$rIU$1$k$@$1$G!"(BQR$B%3!<%I$,@8@.$5$l$k!#$3$l$r(BQR$B%3!<%I%j!<%@!<$G%9%-%c%s$9$l$P!"$=$N(BURL$B$KHt$Y$k!#(B
$B!!(Bgoo.gl/T8ZN.qr
$B$C$F$3$H(B? $B!D!D$*$)%C!#(Bhttp://www.st.ryukoku.ac.jp/~kjm/security/memo/ $BMQ$b$D$/$C$F$*$$$?J}$,$h$5$2$@$J!#(B
goo.gl/pwSG$B!"(Bgoo.gl/pwSG.qr
$B!!C;=L(B URL $B$C$F!"$J$s$@$+!"(BTHcomp $B$C$]$$(B?
$B!!$C$F$$$&$+!"(Bhttps://goo.gl/ $B$,5!G=$7$J$$$H!"(Bhttps:// $B$KHt$P$9C;=L(B URL $B$D$/$C$F$b0UL#$J$$$8$c$s26!D!D!#(B
$B!U(B
$B!XL5@~(BLAN$B%;%-%e%j%F%#$N652J=q!!(B2011$B!YK\F|H/Gd$H$J$j$^$7$?!#(B
(Hacker Japan Blog, 9/27)
$B!U(B
$BD>M"F~L5@~5!4o$K$4MQ?4!"!V5;E,%^!<%/!W$N$J$$@=IJ$r;H$&$HEEGHK!0cH?(B
(so-net $B%;%-%e%j%F%#DL?.(B, 10/1)
$B!U(B
PHP$B%+%s%U%!%l%s%9(B2010 $B%S%8%M%9%G%$$N9V1i;qNA(B(PORVE for PHP)
(yohgaki's blog, 9/29)
$B!U(B
IE9 Beta $B$N%^%$%J!<$JJQ99E@%j%9%H(B
($BMU$C$QF|5-(B, 9/22)$B!#!V%;%-%e%j%F%#!W$H$$$&9`$,$"$j!"$$$m$$$m=q$+$l$F$^$9!#$?$H$($P$3$s$J$3$H(B:
IE9$B%V%i%&%6%b!<%I$G$O!"(BIE$B$O(B text/plain $B$J%3%s%F%s%D$r%9%K%U$K$h$j(B text/html $B$H$7$F07$&$3$H$O$"$j$^$;$s!#(BIE8 $B$G$O(BMIME$B%9%K%U$+$iJ]8n$9$k$?$a$K$O%5%$%H$O(B X-Content-Type-Option: nosniff $B%X%C%@$rAw$kI,MW$,$"$j$^$7$?!#$b$A$m$s!"?.Mj$G$-$J$$%f!<%6$K$h$j%"%C%W%m!<%I$5$l$?%3%s%F%s%D$rG[?.$9$k$K$O!"$3$N%X%C%@$rAw=P$9$k$N$,8=>u$G$b%Y%9%H%W%i%/%F%#%9$G$9!#(B
$B!!%^%$%J!<$JJQ99E@$J$s$@!D!D!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#Gr=q(B2010
($B?eL57n$P$1$i$N$($SF|5-(B, 9/22)
$B!U(B
Safe Browsing Alerts for Network Administrators
(Google Online Security Blog, 9/28)
$B!U(B
$B%m%^?M$N;R$I$b$NH>?t$,=iEy650i$r
($B9qO">pJs;o#S#U#N%V%m%0BP1~HG(B, 9/28)
$B!U(B
Amazon EC2$B$b4F;k$G$-$k%*!<%W%s%=!<%9$N%b%K%?%j%s%0%D!<%k!V(BOpsview Community 3.9$B!W8x3+(B
(sourceforge.jp, 9/30)
$B!U(B
ZeuS / ZBot
$B!U(B
$B7Y;!D#$,%M%C%HA\::$G?7pJs$NE&H/6/2=(B
($BCfF|(B, 9/30)$B!#$H$$$&$+!"(B
$B!!%M%C%H>e$N0cK!>pJs$O!"7Y;!D#$,6HL30QBw$7$?:bCDK!?M$,1?1D$9$k!V%$%s%?!<%M%C%H!&%[%C%H%i%$%s%;%s%?!pJs$NH/?.CO$,J,$+$i$J$$$^$^!"#I#H#C$NDLJs$rA4ETF;I\8)7Y$KA47oDLCN$7$F$$$?!#(B
$B!!$3$N$?$a!"$I$3$NETF;I\8)7Y$,=j4I$K$J$k$N$+L@3N$K$J$i$:!"!V$*8+9g$$!W!J7Y;!D#44It!K$r$7$F$7$^$&$J$I!"==J,$JA\::$K$D$J$,$C$F$$$J$+$C$?!#eH>4|$K#I#H#C$+$i7Y;!D#$KDLJs$,$"$C$?0cK!>pJs$O#1K|#2#1#4#27o$K>e$C$?$,!"N)7o$O#2#2#67o$K$H$I$^$C$F$$$?!#(B
$B!!=>Mh
$B!U(B
AVTOKYO 2010 $B%A%1%C%HH/Gd3+;O(B
($B$F$C$7!<$N4]=P$7(B, 10/1)
$B!U(B
$B65<<$G%[%o%$%H%N%$%:$rN.$9$HCm0U;6L!$J@8EL$N3X=,8z2L$,>e$,$k$,!"IaCJ$+$i=8Cf$G$-$k@8EL$K$O5U8z2L(B
(gigazine, 10/1)
$B!U(B
$B%Q%M%kF$O@2q!'!V2,:j;TCf1{?^=q4[%&%'%V%5!<%P;v7o!W$+$i>pJs2=
(esd21.jp)$B!#(B2010.10.02 ($BL@F|(B)$B!"0&CN8)(Bf$BL>8E20;T!"L5NA!#J!8w$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$=$NB>$N2,:jJ}LL(B:
$B$3$s$K$A$O!#K\F|$ND+F|?7J9L>8E20K\ItK\pJsN.=PLdBj$K$D$$$F5-;v$,7G:\$5$l$^$7$?!#!VEPO?
(kanda_daisuke $B?@ED!!Bg2p(B, 9/30)
$B8D?M>pJs!'?^=q4[MxMQpJs!"#1#1#6?MJ,%M%C%HN.=P(B -- $B$($S$N;T!!!?5\:j(B
($BKhF|(B, 9/30)
$B0&CN8)2,:j;TN)Cf1{?^=q4[$H5\>k8)$($S$N;TN)?^=q4[$+$i$N8D?M>pJsO31L(B
($B$?$L$-$sIOK3F|5-(B, 10/1)$B!#$($S$N$H2,:j$NBg$-$J0c$$!#(B
$BD+F|?7J9L>8E20HG!V%Q%9%o!<%I!"4IM}2q
($B9bLZ9@8w!w<+Bp$NF|5-(B, 9/29)$B!#(B8/23 $B$N5-;v!#(B
$B>.Eg$O$:$C$H4*0c$$$7$F$$$?$N$G$9$,!"$3$N(B anonymous FTP $B$C$F!"C1$KFI$a$k$@$1$8$c$J$/$F!"=q$-9~$_$b$G$-$k>uBV$@$C$?$N$G$9$M!#(B
$BJ@pJs$NN.=P$K$D$$$F!J$*OM$S!K(B
($B@iBeED6=;:(B, 10/1)
[$BN.=P$7$?8D?M>pJs(B]
1.$B
$B!!(B(1)$BK?;T?^=q4[MxMQpJs%G!<%?!J(B159$BL>J,!K(B
2.$B$($S$N;T?^=q4[(B
$B!!(B(1)$B>e5-(B(1)$B$HF1$88D?M>pJs%G!<%?!J(B159$BL>J,!K(B
$B!!(B(2)$B$($S$N;T?^=q4[MxMQpJs%G!<%?!#N.=P$7$?9`L\!"7o?t$J$I$r1T0UD4::Cf$G(B
$B$9!#(B
$BA0
(kanda_daisuke $B?@ED!!Bg2p(B, 10/1)
$B2,:j;T!&$($S$N;TN)?^=q4[$NMxMQpJsN.=P!A860x$O%7%9%F%`0QBw@h$N%_%9(B
(so-net $B%;%-%e%j%F%#DL?.(B, 10/1)
$BN.@P!";0I)EE5!!"EE8w@P2P$N8D?M>pJsO31L$X$NBP1~(B
($BF|!9@'!&!&!&(B, 10/1)
$B!U(B
$BCf9q$N(BiPhone 4$B$O!H8!1\HG!I!"%f!<%6!<$,Js9p(B
(ITmedia, 9/30)
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/~kjm/security/memo/memologo-s.png)
