Red Hat Enterprise Linux

ソフト名：Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (GNU C Library 2.13未満)

回避策：RHSA-2011:0412-1, RHSA-2011:0413-01にて対応

脆弱性：権限の昇格, DoS攻撃, システムアクセス, スタック破壊

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0412.html

https://rhn.redhat.com/errata/RHSA-2011-0413.html

http://secunia.com/advisories/42215/

http://secunia.com/advisories/43492/

http://secunia.com/advisories/43976/

http://secunia.com/advisories/43830/

http://secunia.com/advisories/43989/

http://dvw-j.blogspot.com/2011/03/gnu-c-library.html

http://dvw-j.blogspot.com/2011/04/gnu-c-library.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0296

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3847

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0536

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1071

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1095

CVE：CVE-2010-0296, CVE-2010-3847, CVE-2011-0536, CVE-2011-1071, CVE-2011-1095

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux

ソフト名：Canonical Ltd. Ubuntu Linux 8.04/9.10/10.04/10.10 (FFmpeg 0.6.1未満)

回避策：USN-1104-1にて対応

脆弱性：DoS攻撃, システムアクセス, クラッシュ, メモリ破壊, スタック破壊, アレイインデックスエラー, リモートコード実行

ソース：http://www.ubuntu.com/

http://www.ubuntu.com/usn/usn-1104-1

http://secunia.com/advisories/41626/

http://secunia.com/advisories/43197/

http://secunia.com/advisories/43971/

http://dvw-j.blogspot.com/2011/02/ffmpeg.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3429

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3908

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4704

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0480

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0722

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0723

CVE：CVE-2010-3429, CVE-2010-3908, CVE-2010-4704, CVE-2011-0480, CVE-2011-0722, CVE-2011-0723

危険性：Medium Risk