NCSS

ソフト名：NCSS 2007 07.1.21

回避策：未対応

脆弱性：システムアクセス, 配列インデックスエラー, リモートコード実行

ソース：

http://www.ncss.com/download_NCSS.html

http://aluigi.altervista.org/adv/ncss_1-adv.txt

http://secunia.com/advisories/46213/

危険性：High Risk

Microsoft Excel, Microsoft Office

ソフト名：Microsoft Excel 2003/2007/Viewer 2007/2010, Microsoft Office 2003 Professional Edition/2003 Small Business Edition/2003 Standard Edition/2003 Student and Teacher Edition/2004 for Mac/2007/Office SharePoint Server 2007/2008 for Mac/2010/Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats/Office for Mac 2011/Office Web Apps, Microsoft Open XML File Format Converter for Mac, Microsoft SharePoint Server 2010

回避策：MS11-072 (KB2553070, KB2553072, KB2553073, KB2553074, KB2553075, KB2553095, KB2553096, KB2553089, KB2553090, KB2553091, KB2553093, KB2553094, KB2587505, KB2598781, KB2598782, KB2598783, KB2598785)にて対応

脆弱性：システムアクセス, 解放後使用エラー, 配列インデックスエラー, メモリ破壊, 不正Excelファイル, リモートコード実行

ソース：

http://office.microsoft.com/en-us/

http://office.microsoft.com/en-us/excel/

http://office.microsoft.com/en-us/suites/microsoft-office-2010-suites-FX101825188.aspx

http://www.macoffice2008.com/

http://office.microsoft.com/en-us/support/microsoft-office-compatibility-pack-for-word-excel-and-powerpoint-HA010168676.aspx

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=10

http://www.microsoft.com/mac/products

http://office.microsoft.com/en-us/sharepoint-help/

http://office.microsoft.com/en-us/web-apps/

http://www.microsoft.com/mac/downloads

http://sharepoint.microsoft.com/ja-jp/Pages/default.aspx

http://technet.microsoft.com/en-us/security/bulletin/ms11-072

http://secunia.com/advisories/45932/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1986

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1987

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1988

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1989

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1990

CVE：CVE-2011-1986, CVE-2011-1987, CVE-2011-1988, CVE-2011-1989, CVE-2011-1990

危険性：High Risk

Debian GNU/Linux

ソフト名：Debian GNU/Linux 6.0 (FFmpeg 0.6.x)

回避策：DSA-2306-1にて対応

脆弱性：システムアクセス, DoS攻撃, メモリ破壊, クラッシュ, 配列インデックスエラー, リモートコード実行, 不正RealMediaファイル, 不正WMVファイル, 不正Vorbisファイル, ゼロ除算, 不正APEファイル

ソース：

http://www.debian.org/

http://www.debian.org/security/2011/dsa-2306

http://secunia.com/advisories/41626/

http://secunia.com/advisories/43197/

http://secunia.com/advisories/45964/

http://dvw-j.blogspot.com/2011/02/ffmpeg.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3908

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4704

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0480

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0722

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0723

CVE：CVE-2010-3908, CVE-2010-4704, CVE-2011-0480, CVE-2011-0722, CVE-2011-0723

危険性：Medium Risk

Microsoft Excel

ソフト名：Microsoft Excel 2002〜Mac 2011

回避策：MS11-021 (KB2464583, KB2466146, KB2466156, KB2466158, KB2466169, KB2489279, KB2502786, KB2505924, KB2505927, KB2505935, KB2525412)にて対応

脆弱性：システムアクセス, バッファオーバーフロー, 整数オーバーフロー, 未知のエラー, メモリ破壊, 配列インデックスエラー

ソース：http://office.microsoft.com/en-us/excel/

http://office.microsoft.com/en-us/

http://office.microsoft.com/en-us/support/microsoft-office-compatibility-pack-for-word-excel-and-powerpoint-2007-file-formats-HA010168676.aspx

http://www.microsoft.com/downloads/en/details.aspx?familyid=1CD6ACF9-CE06-4E1C-8DCF-F33F669DBC3A&displaylang=en

http://www.microsoft.com/mac/products

http://www.macoffice2008.com/

http://www.microsoft.com/technet/security/Bulletin/MS11-021.mspx

http://secunia.com/secunia_research/2011-31/

http://secunia.com/secunia_research/2011-32/

http://secunia.com/advisories/39122/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0097

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0098

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0101

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0103

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0104

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0105

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0978

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0979

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0980

CVE：CVE-2011-0097, CVE-2011-0098, CVE-2011-0101, CVE-2011-0103, CVE-2011-0104, CVE-2011-0105, CVE-2011-0978, CVE-2011-0979, CVE-2011-0980

危険性：High Risk

Microsoft Windows

ソフト名：Microsoft Windows XP Home Edition/XP Professional/Server 2003 Datacenter Edition/Server 2003 Enterprise Edition/Server 2003 Standard Edition/Server 2003 Web Edition/Storage Server 2003

回避策：MS11-033 (KB2485663)にて対応

脆弱性：システムアクセス, 配列インデックスエラー, 区域外メモリの使用, メモリ破壊, リモートコード実行

ソース：http://www.microsoft.com/windowsserver2008/en/us/technologies.aspx

http://www.microsoft.com/windowsserversystem/wss2003/default.mspx

http://www.microsoft.com/technet/security/Bulletin/MS11-033.mspx

http://secunia.com/secunia_research/2011-33/

http://secunia.com/advisories/41387/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0028

CVE：CVE-2011-0028

危険性：High Risk