Red Hat Enterprise Linux Extras

ソフト名：Red Hat Enterprise Linux Extras v. 4/Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6) (IBM Java 6.x)

回避策：RHSA-2011:0938-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-0938.html

http://secunia.com/advisories/45206/

http://secunia.com/advisories/45229/

http://dvw-j.blogspot.com/2011/07/ibm-java.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0863, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0873

危険性：High Risk

Sun Java, Red Hat Enterprise Linux, Red Hat Enterprise Linux Extras, Red Hat Enterprise Linux Desktop Supplementary

ソフト名：Sun Java JDK 1.5.x/1.6.x/6.x, Sun Java JRE 1.6.x/6.x, Sun Java SDK 1.4.x, Red Hat Enterprise Linux 5 (Server)/Desktop 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Red Hat Enterprise Linux Extras v. 4, Red Hat Enterprise Linux Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/HPC Node Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)

回避策：アップデートにて対応, RHSA-2011:0856-1, RHSA-2011:0857-1, RHSA-2011:0860-1にて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, システムアクセス, 整数オーバーフローエラー, メモリ破壊, リモートコード実行, 解放後使用エラー, リモートコマンド実行

ソース：http://www.oracle.com/technetwork/java/javase/overview/index.html

http://www.oracle.com/technetwork/java/javase/overview/index-jsp-136246.html

http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

http://www.redhat.com/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://rhn.redhat.com/errata/RHSA-2011-0856.html

https://rhn.redhat.com/errata/RHSA-2011-0857.html

https://rhn.redhat.com/errata/RHSA-2011-0860.html

http://www.zerodayinitiative.com/advisories/ZDI-11-182/

http://www.zerodayinitiative.com/advisories/ZDI-11-183/

http://www.zerodayinitiative.com/advisories/ZDI-11-184/

http://www.zerodayinitiative.com/advisories/ZDI-11-185/

http://www.zerodayinitiative.com/advisories/ZDI-11-186/

http://www.zerodayinitiative.com/advisories/ZDI-11-187/

http://www.zerodayinitiative.com/advisories/ZDI-11-188/

http://www.zerodayinitiative.com/advisories/ZDI-11-189/

http://www.zerodayinitiative.com/advisories/ZDI-11-190/

http://www.zerodayinitiative.com/advisories/ZDI-11-191/

http://www.zerodayinitiative.com/advisories/ZDI-11-192/

http://secunia.com/advisories/44784/

http://secunia.com/advisories/44818/

http://secunia.com/advisories/44880/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0786

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0802

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0814

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0815

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0817

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0863

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0865

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0866

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0867

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0868

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0869

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0871

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0872

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0873

CVE：CVE-2011-0786, CVE-2011-0788, CVE-2011-0802, CVE-2011-0814, CVE-2011-0815, CVE-2011-0817, CVE-2011-0862, CVE-2011-0863, CVE-2011-0864, CVE-2011-0865, CVE-2011-0866, CVE-2011-0867, CVE-2011-0868, CVE-2011-0869, CVE-2011-0871, CVE-2011-0872, CVE-2011-0873

危険性：High Risk

Red Hat Enterprise Linux Desktop Supplementary

ソフト名：Red Hat Enterprise Linux Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6) (Adobe Flash Player 10.3.x)

回避策：RHSA-2011:0850-1にて対応

脆弱性：XSS, 不正HTMLの実行, スクリプトコード実行

ソース：http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-0850.html

http://secunia.com/advisories/44846/

http://secunia.com/advisories/44872/

http://dvw-j.blogspot.com/2011/06/adobe-flash-player.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2107

CVE：CVE-2011-2107

危険性：Medium Risk

Adobe Flash Player, RHEL Desktop Supplementary, Red Hat Enterprise Linux Desktop Supplementary

ソフト名：Adobe Flash Player 10.2.159.1 以下のWindows Macintosh Linux Solaris版/10.2.154.28以下のChrome版/10.2.157.51以下のAndroid版, RHEL Desktop Supplementary (v. 5 client)/(v. 5 server), Red Hat Enterprise Linux Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6), Google Chrome 11.0.696.68未満

回避策：アップデート, APSB11-12にて対応, RHSA-2011:0511-1にて対応, アップデートにて対応

脆弱性：機密情報の奪取, システムアクセス, 不特定のエラー, 整数オーバーフローエラー, リモートコード実行, メモリ破壊, バウンダリエラー

ソース：http://www.adobe.com/products/flashplayer/

http://www.redhat.com/

http://www.google.co.jp/chrome/intl/ja/landing_ff.html

http://www.adobe.com/support/security/bulletins/apsb11-12.html

https://rhn.redhat.com/errata/RHSA-2011-0511.html

http://feeds.feedburner.com/GoogleChromeReleases

http://secunia.com/advisories/44568/

http://secunia.com/advisories/44590/

http://secunia.com/advisories/44591/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0579

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0618

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0619

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0620

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0621

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0622

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0623

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0624

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0625

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0626

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0627

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1799

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1800

CVE：CVE-2011-0579, CVE-2011-0618, CVE-2011-0619, CVE-2011-0620, CVE-2011-0621, CVE-2011-0622, CVE-2011-0623, CVE-2011-0624, CVE-2011-0625, CVE-2011-0626, CVE-2011-0627, CVE-2011-1799, CVE-2011-1800

危険性：High Risk