Red Hat Enterprise Linux

ソフト名：Red Hat Enterprise Linux Server 6/Workstation 6 (Eclipse 3.6.1)

回避策：RHSA-2011:0568-1にて対応

脆弱性：XSS, 不正HTMLの実行, スクリプトコード実行

ソース：http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0568.html

http://secunia.com/advisories/42236/

http://secunia.com/advisories/44643/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4647

CVE：CVE-2010-4647

危険性：Medium Risk

Eclipse Foundation Eclipse

ソフト名：Eclipse Foundation Eclipse 3.6.1
回避策：Eclipse SVN Repositoryにて対応
脆弱性：XSS, 認証資格情報の奪取
ソース：http://dev.eclipse.org/viewcvs/index.cgi/org.eclipse.help.webapp/basic/index.jsp?r1=1.17&r2=1.18
http://dev.eclipse.org/viewcvs/index.cgi/org.eclipse.help.webapp/advanced/content.jsp?r1=1.33&r2=1.34
http://yehg.net/lab/pr0js/advisories/eclipse/%5Beclipse_help_server%5D_cross_site_scripting
http://secunia.com/advisories/42236
http://www.vupen.com/english/advisories/2010/2988
危険性：Medium Risk