Mozilla Firefox, Mozilla SeaMonkey, Mozilla Thunderbird, Red Hat Desktop, Red Hat Enterprise Linux, Canonical Ltd. Ubuntu Linux

ソフト名：Mozilla Firefox 3.6.23未満/6.x, Mozilla SeaMonkey 2.4未満, Mozilla Thunderbird 6.x, Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Canonical Ltd. Ubuntu Linux 10.04/10.10

回避策：アップデート, 7.0へのアップグレードにて対応, アップデートにて対応, 7.0へのアップグレードにて対応, RHSA-2011:1341-01, RHSA-2011:1342-01, RHSA-2011:1343-1, RHSA-2011:1344-1にて対応, USN-1210-1, USN-1213-1にて対応

脆弱性：セキュリティ制限の回避, システムアクセス, 不特定のエラー, メモリ破壊, XSS保護の回避, 不正アプリケーションのダウンロード, 不正アプリケーションの実行, バッファオーバーフロー, 不正プラグインのインストール, リモートコード実行, 解放後使用エラー, キーストロークの閲覧, レスポンス分割攻撃, 整数アンダーフローエラー

ソース：

http://www.mozilla.org/en-US/firefox/new/

http://mozilla.jp/firefox/

http://www.seamonkey-project.org/

http://www.mozilla.org/en-US/thunderbird/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://www.ubuntu.com/

http://www.mozilla.org/security/announce/2011/mfsa2011-36.html

http://www.mozilla.org/security/announce/2011/mfsa2011-37.html

http://www.mozilla.org/security/announce/2011/mfsa2011-38.html

http://www.mozilla.org/security/announce/2011/mfsa2011-39.html

http://www.mozilla.org/security/announce/2011/mfsa2011-40.html

http://www.mozilla.org/security/announce/2011/mfsa2011-41.html

http://www.mozilla.org/security/announce/2011/mfsa2011-42.html

http://www.mozilla.org/security/announce/2011/mfsa2011-43.html

http://www.mozilla.org/security/announce/2011/mfsa2011-44.html

http://www.mozilla.org/security/announce/2011/mfsa2011-45.html

http://www.usenix.org/events/hotsec11/tech/final_files/Cai.pdf

https://rhn.redhat.com/errata/RHSA-2011-1341.html

https://rhn.redhat.com/errata/RHSA-2011-1342.html

https://rhn.redhat.com/errata/RHSA-2011-1343.html

https://rhn.redhat.com/errata/RHSA-2011-1344.html

http://www.ubuntu.com/usn/usn-1210-1/

http://www.ubuntu.com/usn/usn-1213-1/

http://secunia.com/advisories/46171/

http://secunia.com/advisories/46184/

http://secunia.com/advisories/46190/

http://secunia.com/advisories/46192/

http://secunia.com/advisories/46194/

http://secunia.com/advisories/46196/

http://secunia.com/advisories/46203/

http://secunia.com/advisories/46204/

http://secunia.com/advisories/46205/

http://secunia.com/advisories/46217/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2372

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2995

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2996

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2997

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2998

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2999

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3000

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3001

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3002

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3003

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3004

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3005

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3232

CVE：CVE-2011-2372, CVE-2011-2995, CVE-2011-2996, CVE-2011-2997, CVE-2011-2998, CVE-2011-2999, CVE-2011-3000, CVE-2011-3001, CVE-2011-3002, CVE-2011-3003, CVE-2011-3004, CVE-2011-3005, CVE-2011-3232

危険性：High Risk

AdaptCMS

ソフト名：AdaptCMS 2.0.1

回避策：未対応

脆弱性：セキュリティ制限の回避, XSS, 不正HTMLの実行, スクリプトコード実行

ソース：

http://www.adaptcms.com/

http://www.insanevisions.com/article/293/News/AdaptCMS-201-Security-Hole

http://www.rul3z.de/advisories/SSCHADV2011-018.txt

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux

ソフト名：Canonical Ltd. Ubuntu Linux 10.04 (Kernel.org Linux Kernel 2.6.x)

回避策：USN-1216-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, 権限の昇格, DoS攻撃, システムアクセス, カーネルスタックメモリの曝露, プロセス設定の操作, 不正パケット, メモリの浪費, メモリ破壊, メモリリーク, クラッシュ, イベントオーバーフローエラー, 不正アプリケーション

ソース：

http://www.ubuntu.com/

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-September/001426.html

http://secunia.com/advisories/39080/

http://secunia.com/advisories/42061/

http://secunia.com/advisories/43496/

http://secunia.com/advisories/43846/

http://secunia.com/advisories/44466/

http://secunia.com/advisories/44754/

http://secunia.com/advisories/45420/

http://secunia.com/advisories/45533/

http://secunia.com/advisories/46147/

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_23.html

http://dvw-j.blogspot.com/2011/05/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/06/kernelorg-linux-kernel_07.html

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel_19.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4076

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4077

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4805

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1020

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1493

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2484

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2700

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2723

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2918

CVE：CVE-2010-4076, CVE-2010-4077, CVE-2010-4251, CVE-2010-4805, CVE-2011-1020, CVE-2011-1493, CVE-2011-1577, CVE-2011-2213, CVE-2011-2484, CVE-2011-2492, CVE-2011-2700, CVE-2011-2723, CVE-2011-2918

危険性：Medium Risk

JAKCMS

ソフト名：JAKCMS 2.2.6

回避策：未対応

脆弱性：セキュリティ制限の回避, システムアクセス, リモートファイルアップロード, PHPコード実行

ソース：

http://www.jakcms.com/download

http://www.jakcms.com/tracker/t/61/security-flaw-imagefilemanager

http://secunia.com/advisories/46131/

危険性：High Risk

Debian GNU/Linux

ソフト名：Debian GNU/Linux 5.0 (Kernel.org Linux Kernel 2.6.x)

回避策：DSA-2310-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, 権限の昇格, DoS攻撃, システムアクセス, ファイル操作, 整数オーバーフローエラー, クラッシュ, NULLポインタの逆参照, カーネルメモリ破壊, メモリ情報の曝露, プロセス設定の操作, 展開処理エラー, メモリリーク, カーネルスタックメモリの曝露, 不正CIFSメッセージ

ソース：

http://www.debian.org/

http://lists.debian.org/debian-security-announce/2011/msg00187.html

http://secunia.com/advisories/40205/

http://secunia.com/advisories/43009/

http://secunia.com/advisories/43496/

http://secunia.com/advisories/44094/

http://secunia.com/advisories/44466/

http://secunia.com/advisories/44754/

http://secunia.com/advisories/45695/

http://secunia.com/advisories/46133/

http://dvw-j.blogspot.com/2011/01/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_3728.html

http://dvw-j.blogspot.com/2011/05/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/06/kernelorg-linux-kernel_07.html

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel_26.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4067

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1020

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2209

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2211

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2484

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2491

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2495

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2496

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2497

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2525

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3188

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3191

CVE：CVE-2009-4067, CVE-2011-0712, CVE-2011-1020, CVE-2011-2209, CVE-2011-2211, CVE-2011-2213, CVE-2011-2484, CVE-2011-2491, CVE-2011-2492, CVE-2011-2495, CVE-2011-2496, CVE-2011-2497, CVE-2011-2525, CVE-2011-2928, CVE-2011-3188, CVE-2011-3191

危険性：Medium Risk

MoboTap Inc. Dolphin Browser HD

ソフト名：MoboTap Inc. Dolphin Browser HD for Android 6.0.0

回避策：6.1.0へのアップデートにて対応

脆弱性：セキュリティ制限の回避, XSS, スクリプトの挿入, 不正アプリケーションのインストール

ソース：

http://www.dolphin-browser.com/

http://blog.watchfire.com/files/advisory-dolphin.pdf

http://secunia.com/advisories/46058/

危険性：Low Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14 (OpenLDAP 2.4.24未満)

回避策：FEDORA-2011-3627にて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, パスワード脆弱性, クラッシュ

ソース：

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066251.html

http://secunia.com/advisories/43331/

http://secunia.com/advisories/46182/

http://dvw-j.blogspot.com/2011/02/openldap.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1024

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1025

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1081

CVE：CVE-2011-1024, CVE-2011-1025, CVE-2011-1081

危険性：Medium Risk

Red Hat JBoss Enterprise SOA Platform

ソフト名：Red Hat JBoss Enterprise SOA Platform 5.x (SpringSource Spring Framework 3.0.0〜3.0.5)

回避策：RHSA-2011:1334-01にて対応

脆弱性：システムアクセス, 不特定のエラー, リモートコード実行, セキュリティ制限の回避

ソース：

http://www.jboss.com/products/platforms/soa/

https://rhn.redhat.com/errata/RHSA-2011-1334.html

http://secunia.com/advisories/45942/

http://secunia.com/advisories/46143/

http://dvw-j.blogspot.com/2011/09/springsource-spring-framework.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2894

CVE：CVE-2011-2894

危険性：High Risk

Debian apt, Canonical Ltd. Ubuntu Linux

ソフト名：Debian apt 0.x, Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10

回避策：未対応, USN-1215-1にて対応

脆弱性：セキュリティ制限の回避, スプーフィング, マンインミドル攻撃，

ソース：

http://packages.debian.org/search?searchon=sourcenames&keywords=apt

http://www.ubuntu.com/

http://archives.neohapsis.com/archives/fulldisclosure/2011-09/0256.html

http://www.ubuntu.com/usn/usn-1215-1/

http://secunia.com/advisories/46046/

http://secunia.com/advisories/46149/

危険性：Medium Risk

Red Hat Enterprise Linux Supplementary, Novell openSUSE

ソフト名：Red Hat Enterprise Linux Supplementary (Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)), Novell openSUSE 11.3/11.4 (Adobe Flash Player 10.x)

回避策：RHSA-2011:1333-01にて対応, openSUSE-SU-2011:1060-1にて対応

脆弱性：セキュリティ制限の回避, XSS, システムアクセス, 不正HTMLの実行, スクリプトコード実行, バッファオーバーフロー, 論理エラー, メモリ破壊

ソース：

http://www.redhat.com/

http://www.opensuse.org/en/

https://rhn.redhat.com/errata/RHSA-2011-1333.html

https://hermes.opensuse.org/messages/11868434

http://secunia.com/advisories/46113/

http://secunia.com/advisories/46142/

http://secunia.com/advisories/46155/

http://dvw-j.blogspot.com/2011/09/google-chrome_23.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2426

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2427

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2428

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2429

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2430

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2444

CVE：CVE-2011-2426, CVE-2011-2427, CVE-2011-2428, CVE-2011-2429, CVE-2011-2430, CVE-2011-2444

危険性：High Risk

Opera Software Opera Mobile

ソフト名：Opera Software Opera Mobile for Android 11.1

回避策：11.1 update 2へのアップデートにて対応

脆弱性：セキュリティ制限の回避, 不正Java Scriptコード実行, 不正アプリケーション

ソース：

http://www.opera.com/mobile/

http://my.opera.com/operamobile/blog/2011/09/13/android-11-1-update-2-ready-for-download

http://blog.watchfire.com/files/advisory-opera-cp-xas.pdf

http://secunia.com/advisories/46065/

危険性：Low Risk

Cisco Identity Services Engine

ソフト名：Cisco Identity Services Engine (ISE) 1.0.4.MR2未満

回避策：アップデートにて対応

脆弱性：セキュリティ制限の回避, デバイスの操作

ソース：

http://www.cisco.com/en/US/products/ps11640/tsd_products_support_series_home.html

http://www.cisco.com/warp/public/707/cisco-sa-20110920-ise.shtml

http://secunia.com/advisories/46061/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3290

CVE：CVE-2011-3290

危険性：Medium Risk

Google Chrome

ソフト名：Google Chrome 14.x (Adobe Flash Player 10.x)

回避策：14.0.835.186へのアップデートにて対応

脆弱性：セキュリティ制限の回避, XSS, システムアクセス, 不正HTMLの実行, スクリプトコード実行, バッファオーバーフロー, 論理エラー, メモリ破壊

ソース：

http://www.google.co.jp/chrome/intl/ja/landing_ff.html

http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_20.html

http://secunia.com/advisories/46102/

http://secunia.com/advisories/46113/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2426

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2427

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2428

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2429

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2430

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2444

CVE：CVE-2011-2426, CVE-2011-2427, CVE-2011-2428, CVE-2011-2429, CVE-2011-2430, CVE-2011-2444

危険性：High Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14

回避策：FEDORA-2011-11537にて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, システムアクセス

ソース：

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066102.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066103.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066104.html

http://secunia.com/advisories/44874/

http://secunia.com/advisories/46037/

http://dvw-j.blogspot.com/2011/06/php.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1148

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2202

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483

CVE：CVE-2011-1148, CVE-2011-1938, CVE-2011-2202, CVE-2011-2483

危険性：Medium Risk

Google Chrome

ソフト名：Google Chrome 13.x

回避策：14.0.835.163へのアップデートにて対応

脆弱性：セキュリティ制限の回避, スプーフィング, 機密情報の奪取, システムアクセス, 不特定のエラー, 区域外メモリの使用, 解放後使用エラー, オフバイワンエラー, 二重解放エラー

ソース：

http://www.google.co.jp/chrome/intl/ja/landing_ff.html

http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html

http://www.alternativ-testing.fr/blog/index.php?post/2011/Google-Chrome-Webkit-URL-Bar-Spoofing-SSL/TLS-Spoofing

http://secunia.com/advisories/46049/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2834

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2835

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2836

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2837

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2838

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2839

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2840

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2841

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2842

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2843

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2844

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2846

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2847

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2848

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2849

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2850

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2851

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2852

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2853

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2854

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2855

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2856

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2857

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2858

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2859

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2860

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2861

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2874

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2875

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3234

CVE：CVE-2011-2834, CVE-2011-2835, CVE-2011-2836, CVE-2011-2837, CVE-2011-2838, CVE-2011-2839, CVE-2011-2840, CVE-2011-2841, CVE-2011-2842, CVE-2011-2843, CVE-2011-2844, CVE-2011-2846, CVE-2011-2847, CVE-2011-2848, CVE-2011-2849, CVE-2011-2850, CVE-2011-2851, CVE-2011-2852, CVE-2011-2853, CVE-2011-2854, CVE-2011-2855, CVE-2011-2856, CVE-2011-2857, CVE-2011-2858, CVE-2011-2859, CVE-2011-2860, CVE-2011-2861, CVE-2011-2862, CVE-2011-2864, CVE-2011-2874, CVE-2011-2875, CVE-2011-3234

危険性：High Risk

OpenVZ

ソフト名：OpenVZ (Red Hat Enterprise Linux Desktop 6/HPC Node 6/Server 6/Workstation 6)

回避策：RHEL6 の042stab037.1へのアップデートにて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, DoS攻撃, システムアクセス, メモリリーク, カーネルのクラッシュ, システムコール, カーネルスタックメモリの曝露, バッファオーバーフロー, アロケーションエラー, アウトオブメモリ, システムのクラッシュ, CPUリソースの浪費, 整数オーバーフローエラー, メモリ破壊

ソース：

http://wiki.openvz.org/Main_Page

http://wiki.openvz.org/Download/kernel/rhel6/042stab037.1

http://secunia.com/advisories/45746/

http://secunia.com/advisories/46060/

http://dvw-j.blogspot.com/2011/08/red-hat-enterprise-linux_26.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1576

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1593

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1898

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2183

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2491

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2495

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2497

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2517

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2689

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2695

CVE：CVE-2011-1182, CVE-2011-1576, CVE-2011-1593, CVE-2011-1776, CVE-2011-1898, CVE-2011-2183, CVE-2011-2213, CVE-2011-2491, CVE-2011-2492, CVE-2011-2495, CVE-2011-2497, CVE-2011-2517, CVE-2011-2689, CVE-2011-2695

危険性：Medium Risk

Blue Coat Director

ソフト名：Blue Coat Director (SGME) 5.5.2.3 (OpenBSD OpenSSH 3.6.1p1, Apache 1.3.41/2.0.63/2.0.64/2.2.x)

回避策：あり

脆弱性：セキュリティ制限の回避, XSS, 機密情報の奪取, DoS攻撃, システムアクセス, ユーザー名リストの曝露, メモリの浪費, 不正HTMLの実行, スクリプトコード実行, NULLポインタの逆参照, クラッシュ, イベントのハング, 入力検証エラー, CPUリソースの浪費

ソース：

http://www.bluecoat.com/products/director/features.html

https://kb.bluecoat.com/index?page=content&id=SA61

https://kb.bluecoat.com/index?page=content&id=SA62

https://kb.bluecoat.com/index?page=content&id=SA63

http://secunia.com/advisories/8720/

http://secunia.com/advisories/30621/

http://secunia.com/advisories/31384/

http://secunia.com/advisories/36549/

http://secunia.com/advisories/36675/

http://secunia.com/advisories/38852/

http://secunia.com/advisories/46041/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0190

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2666

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0425

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623

CVE：CVE-2003-0190, CVE-2005-2666, CVE-2008-2364, CVE-2008-2939, CVE-2009-1891, CVE-2009-2412, CVE-2009-3094, CVE-2009-3095, CVE-2009-3555, CVE-2009-3560, CVE-2009-3720, CVE-2010-0425, CVE-2010-0434, CVE-2010-1452, CVE-2010-1623

危険性：Medium Risk

Kolab Server

ソフト名：Kolab Server 2.x

回避策：2.3.3へのアップデートにて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, システムアクセス, ファイルパスインジェクション, ファイル操作, 不正HTTPのリクエスト, メモリの浪費, CRLの受け入れ, 無効なハンドシェイクメッセージの送信, サーバのクラッシュ, バッファオーバーフロー, バウンダリエラー

ソース：

http://www.kolab.org/

http://kolab.org/pipermail/kolab-announce/2011/000102.html

http://secunia.com/advisories/44874/

http://secunia.com/advisories/45606/

http://secunia.com/advisories/45781/

http://secunia.com/advisories/45977/

http://dvw-j.blogspot.com/2011/06/php.html

http://dvw-j.blogspot.com/2011/08/apache.html

http://dvw-j.blogspot.com/2011/09/openssl.html

http://dvw-j.blogspot.com/2011/09/cyrus-imap-server.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1148

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2202

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3208

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210

CVE：CVE-2011-1148, CVE-2011-1938, CVE-2011-2202, CVE-2011-2483, CVE-2011-3192, CVE-2011-3207, CVE-2011-3208, CVE-2011-3210

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux

ソフト名：Canonical Ltd. Ubuntu Linux 10.04/10.10 (Kernel.org Linux Kernel 2.6.x)

回避策：USN-1201-1, USN-1202-1, USN-1203-1, USN-1204-1, USN-1205-1, USN-1208-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, DoS攻撃, システムアクセス, メモリ情報の曝露, プロセス設定の操作, メモリ破壊, メモリリーク, クラッシュ, イベントオーバーフローエラー, 不正アプリケーション, 不正パケット, メモリの浪費, 整数切り捨てエラー, バウンダリエラー, 権限の昇格, CPUリソースの浪費, デリファレンスエラー, NULLポインタ参照エラー, 解放後使用エラー, 入力検証エラー, 無限ループ, ゼロ除算エラー, システムコール

ソース：

http://www.ubuntu.com/

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-September/001411.html

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-September/001412.html

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-September/001413.html

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-September/001415.html

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-September/001418.html

http://secunia.com/advisories/39080/

http://secunia.com/advisories/41002/

http://secunia.com/advisories/41263/

http://secunia.com/advisories/41440/

http://secunia.com/advisories/41493/

http://secunia.com/advisories/42035/

http://secunia.com/advisories/42061/

http://secunia.com/advisories/42126/

http://secunia.com/advisories/42172/

http://secunia.com/advisories/42176/

http://secunia.com/advisories/42187/

http://secunia.com/advisories/43009/

http://secunia.com/advisories/43435/

http://secunia.com/advisories/43496/

http://secunia.com/advisories/43537/

http://secunia.com/advisories/43576/

http://secunia.com/advisories/43594/

http://secunia.com/advisories/43806/

http://secunia.com/advisories/43841/

http://secunia.com/advisories/43846/

http://secunia.com/advisories/44220/

http://secunia.com/advisories/44466/

http://secunia.com/advisories/44754/

http://secunia.com/advisories/45420/

http://secunia.com/advisories/45533/

http://secunia.com/advisories/45993/

http://secunia.com/advisories/45996/

http://secunia.com/advisories/45997/

http://secunia.com/advisories/46003/

http://secunia.com/advisories/46007/

http://dvw-j.blogspot.com/2011/01/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/02/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/03/canonical-ltd-ubuntu-linux_322.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_02.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_08.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_15.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_16.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_3101.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_22.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_23.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_29.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_22.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_26.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_856.html

http://dvw-j.blogspot.com/2011/05/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/06/kernelorg-linux-kernel_07.html

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/08/kernelorg-linux-kernel_19.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3296

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3297

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3858

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3859

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3874

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3880

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4073

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4075

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4076

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4077

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4080

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4081

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4082

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4083

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4157

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4158

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4160

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4162

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4163

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4169

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4175

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4242

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4243

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4248

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4256

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4526

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4565

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4649

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4668

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4805

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0463

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0521

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0695

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0726

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1012

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1013

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1016

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1017

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1019

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1020

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1044

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1078

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1079

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1080

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1082

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1093

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1160

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1169

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1170

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1171

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1172

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1173

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1180

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1493

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1494

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1495

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1593

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1598

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1745

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1746

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1770

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1833

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2022

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2484

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2534

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2699

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2700

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2723

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2918

CVE：CVE-2010-3296, CVE-2010-3297, CVE-2010-3858, CVE-2010-3859, CVE-2010-3874, CVE-2010-3880, CVE-2010-4073, CVE-2010-4075, CVE-2010-4076, CVE-2010-4077, CVE-2010-4080, CVE-2010-4081, CVE-2010-4082, CVE-2010-4083, CVE-2010-4157, CVE-2010-4158, CVE-2010-4160, CVE-2010-4162, CVE-2010-4163, CVE-2010-4169, CVE-2010-4175, CVE-2010-4242, CVE-2010-4243, CVE-2010-4248, CVE-2010-4251, CVE-2010-4256, CVE-2010-4526, CVE-2010-4565, CVE-2010-4649, CVE-2010-4668, CVE-2010-4805, CVE-2011-0463, CVE-2011-0521, CVE-2011-0695, CVE-2011-0711, CVE-2011-0712, CVE-2011-0726, CVE-2011-1010, CVE-2011-1012, CVE-2011-1013, CVE-2011-1016, CVE-2011-1017, CVE-2011-1019, CVE-2011-1020, CVE-2011-1044, CVE-2011-1078, CVE-2011-1079, CVE-2011-1080, CVE-2011-1082, CVE-2011-1090, CVE-2011-1093, CVE-2011-1160, CVE-2011-1163, CVE-2011-1169, CVE-2011-1170, CVE-2011-1171, CVE-2011-1172, CVE-2011-1173, CVE-2011-1180, CVE-2011-1478, CVE-2011-1493, CVE-2011-1494, CVE-2011-1495, CVE-2011-1577, CVE-2011-1593, CVE-2011-1598, CVE-2011-1745, CVE-2011-1746, CVE-2011-1748, CVE-2011-1770, CVE-2011-1833, CVE-2011-2022, CVE-2011-2213, CVE-2011-2484, CVE-2011-2492, CVE-2011-2534, CVE-2011-2699, CVE-2011-2700, CVE-2011-2723, CVE-2011-2918

危険性：Medium Risk

Adobe Acrobat, Adobe Reader

ソフト名：Adobe Acrobat 3D 8.3/8 Professional/8.3以下/9.4.5以下/X 10.1以下, Adobe Reader 8.3以下/9.4.5以下/X 10.1以下 (Adobe Flash Player 10.3.185.25以下(Android)/10.3.181.36以下(Windows/Macintosh/Linux/Solaris))

回避策：apsb11-24にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, 権限の昇格, システムアクセス, バッファオーバーフロー, リモートコード実行, 不特定のエラー, メモリ破壊, 整数オーバーフローエラー, メモリ内容の曝露, 解放後使用エラー

ソース：

http://www.adobe.com/products/acrobatpro.html

http://www.adobe.com/products/acrobat.html

http://www.adobe.com/products/reader.html

http://www.adobe.com/support/security/bulletins/apsb11-24.html

https://labs.idefense.com/verisign/intelligence/2009/vulnerabilities/display.php?id=940

http://secunia.com/advisories/45583/

http://secunia.com/advisories/45978/

http://dvw-j.blogspot.com/2011/08/adobe-air-adobe-flash-player-google.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1353

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2130

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2134

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2135

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2136

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2137

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2138

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2139

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2140

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2414

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2415

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2416

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2417

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2424

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2425

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2431

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2432

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2433

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2434

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2435

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2436

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2437

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2438

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2439

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2440

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2441

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2442

CVE：CVE-2011-1353, CVE-2011-2130, CVE-2011-2134, CVE-2011-2135, CVE-2011-2136, CVE-2011-2137, CVE-2011-2138, CVE-2011-2139, CVE-2011-2140, CVE-2011-2414, CVE-2011-2415, CVE-2011-2416, CVE-2011-2417, CVE-2011-2424, CVE-2011-2425, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441, CVE-2011-2442

危険性：High Risk