Red Hat Enterprise Linux Supplementary, Novell openSUSE

ソフト名：Red Hat Enterprise Linux Supplementary (Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)), Novell openSUSE 11.3/11.4 (Adobe Flash Player 10.x)

回避策：RHSA-2011:1333-01にて対応, openSUSE-SU-2011:1060-1にて対応

脆弱性：セキュリティ制限の回避, XSS, システムアクセス, 不正HTMLの実行, スクリプトコード実行, バッファオーバーフロー, 論理エラー, メモリ破壊

ソース：

http://www.redhat.com/

http://www.opensuse.org/en/

https://rhn.redhat.com/errata/RHSA-2011-1333.html

https://hermes.opensuse.org/messages/11868434

http://secunia.com/advisories/46113/

http://secunia.com/advisories/46142/

http://secunia.com/advisories/46155/

http://dvw-j.blogspot.com/2011/09/google-chrome_23.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2426

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2427

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2428

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2429

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2430

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2444

CVE：CVE-2011-2426, CVE-2011-2427, CVE-2011-2428, CVE-2011-2429, CVE-2011-2430, CVE-2011-2444

危険性：High Risk

Red Hat Enterprise Linux Extras, RHEL Supplementary

ソフト名：Red Hat Enterprise Linux Extras v. 4, RHEL Supplementary (v. 5 server)/Desktop Supplementary (v. 5 client)

回避策：RHSA-2011:1159-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 無限ループ, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：

http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-1159.html

http://secunia.com/advisories/43295/

http://secunia.com/advisories/45206/

http://secunia.com/advisories/45630/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://dvw-j.blogspot.com/2011/07/ibm-java.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0311

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

CVE：CVE-2011-0311, CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0865, CVE-2011-0867, CVE-2011-0871

危険性：High Risk

Adobe AIR, Adobe Flash Player, Google Chrome, RHEL Supplementary, Red Hat Enterprise Linux Supplementary

ソフト名：Adobe AIR 2.7以下, Adobe Flash Player 10.3.185.25以下(Android)/10.3.181.36以下(Windows/Macintosh/Linux/Solaris), Google Chrome 13.0.782.112未満, RHEL Supplementary (v. 5 server)/Desktop Supplementary (v. 5 client), Red Hat Enterprise Linux Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)

回避策：アップデート, APSB11-21にて対応, アップデートにて対応, RHSA-2011:1144-1にて対応

脆弱性：機密情報の奪取, システムアクセス, バッファオーバーフロー, リモートコード実行, 不特定のエラー, メモリ破壊, 整数オーバーフローエラー

ソース：

http://www.adobe.com/products/air/

http://www.adobe.com/products/flashplayer/

http://www.google.co.jp/chrome/intl/ja/landing_ff.html

http://www.redhat.com/

http://www.adobe.com/support/security/bulletins/apsb11-21.html

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=935

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=936

http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_09.html

https://rhn.redhat.com/errata/RHSA-2011-1144.html

http://secunia.com/advisories/45529/

http://secunia.com/advisories/45583/

http://secunia.com/advisories/45593/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2130

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2134

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2135

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2136

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2137

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2138

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2139

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2140

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2414

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2415

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2416

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2417

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2425

CVE：CVE-2011-2130, CVE-2011-2134, CVE-2011-2135, CVE-2011-2136, CVE-2011-2137, CVE-2011-2138, CVE-2011-2139, CVE-2011-2140, CVE-2011-2414, CVE-2011-2415, CVE-2011-2416, CVE-2011-2417, CVE-2011-2425

危険性：High Risk

Red Hat Enterprise Linux Extras, RHEL Supplementary

ソフト名：Red Hat Enterprise Linux Extras v. 4, RHEL Supplementary (v. 5 server)/Desktop Supplementary (v. 5 client) (IBM Java 1.4.x/5.x/6.x)

回避策：RHSA-2011:0490-1にて対応

脆弱性：データ操作, DoS攻撃, システムアクセス, クラッシュ

ソース：http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-0490.html

http://secunia.com/advisories/43295/

http://secunia.com/advisories/44464/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4447

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4448

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4454

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4462

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4465

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4466

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4473

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4475

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0311

CVE：CVE-2010-4447, CVE-2010-4448, CVE-2010-4454, CVE-2010-4462, CVE-2010-4465, CVE-2010-4466, CVE-2010-4473, CVE-2010-4475, CVE-2011-0311

危険性：High Risk

Red Hat Enterprise Linux, RHEL Supplementary, RHEL Desktop Supplementary

ソフト名：Red Hat Enterprise Linux Desktop Supplementary (v. 6)/Extras v. 4/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6), RHEL Supplementary (v. 5 server), RHEL Desktop Supplementary (v. 5 client)
回避策：アップデート, RHSA-2010:0987-1にて対応
脆弱性：セキュリティ制限の回避, データ操作, 機密情報の奪取, DoS攻撃, 不正アクセス, リモートコード実行, メモリ破壊, 整数オーバーフロー, バウンダリエラー
ソース：http://www.redhat.com/
http://www.redhat.com/rhel/details/features/
https://rhn.redhat.com/errata/RHSA-2010-0987.html
http://secunia.com/advisories/41791/
http://secunia.com/advisories/42642/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3541
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3548
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3549
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3551
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3553
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3556
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3557
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3558
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3560
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3562
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3563
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3565
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3566
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3568
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3569
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3571
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3573
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574
CVE：CVE-2009-3555, CVE-2010-1321, CVE-2010-3541, CVE-2010-3548, CVE-2010-3549, CVE-2010-3550, CVE-2010-3551, CVE-2010-3553, CVE-2010-3555, CVE-2010-3556, CVE-2010-3557, CVE-2010-3558, CVE-2010-3560, CVE-2010-3562, CVE-2010-3563, CVE-2010-3565, CVE-2010-3566, CVE-2010-3568, CVE-2010-3569, CVE-2010-3571, CVE-2010-3572, CVE-2010-3573, CVE-2010-3574
危険性：High Risk

Red Hat製品

ソフト名：Red Hat Enterprise Linux Extras v. 4, RHEL Desktop Supplementary (v. 5 client), RHEL Supplementary (v. 5 server)
回避策：RHSA-2010:0935-1にて対応
脆弱性：機密情報の奪取, DoS攻撃, データ操作, 未知の脆弱性
ソース：http://www.redhat.com/rhel/details/features/
http://www.redhat.com/
https://rhn.redhat.com/errata/RHSA-2010-0935.html
http://secunia.com/advisories/39762/
http://secunia.com/advisories/41791/
http://secunia.com/advisories/42432/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3574
CVE：CVE-2010-1321, CVE-2010-3574
危険性：Medium Risk