%u672c%u8a18%u4e8b%u306f%u3001Security Research & Defense %u306e%u30d6%u30ed%u30b0 “Assessing risk for the October 2013 security updates” (2013 %u5e74 10 %u6708 10 %u65e5%u516c%u958b) %u3092%u7ffb%u8a33%u3057%u305f%u8a18%u4e8b%u3067%u3059%u3002
%u672c%u65e5%u3001%u79c1%u305f%u3061%u306f 26 %u4ef6%u306e CVE %u3092%u89e3%u6c7a%u3059%u308b 8 %u4ef6%u306e%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u60c5%u5831%u3092%u30ea%u30ea%u30fc%u30b9%u3057%u307e%u3057%u305f%u3002%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u60c5%u5831%u306e%u5185%u30014 %u4ef6%u306f%u6700%u5927%u6df1%u523b%u5ea6%u304c%u300c%u7dca%u6025%u300d%u3001%u305d%u3057%u3066 4 %u4ef6%u304c%u300c%u91cd%u8981%u300d%u3067%u3057%u305f%u3002%u304a%u5ba2%u69d8%u306e%u74b0%u5883%u306b%u6700%u9069%u306a%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u306e%u9069%u7528%u512a%u5148%u9806%u4f4d%u306e%u6c7a%u5b9a%u304c%u884c%u3048%u308b%u3088%u3046%u3001%u4ee5%u4e0b%u306e%u8868%u3092%u3054%u6d3b%u7528%u304f%u3060%u3055%u3044%u3002
|
%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u60c5%u5831 |
%u6700%u3082%u8d77%u3053%u308a%u3046%u308b%u653b%u6483%u30d9%u30af%u30bf%u30fc |
%u30bb%u30ad%u30e5%u30ea%u30c6%u30a3%u60c5%u5831%u6700%u5927%u6df1%u523b%u5ea6 |
%u6700%u5927%u60aa%u7528%u53ef%u80fd%u6027%u6307%u6a19 |
%u516c%u958b 30 %u65e5%u4ee5%u5185%u306e%u5f71%u97ff |
%u30d7%u30e9%u30c3%u30c8%u30d5%u30a9%u30fc%u30e0%u7de9%u548c%u7b56%u3001%u304a%u3088%u3073%u7279%u8a18%u4e8b%u9805 |
|
(Internet Explorer) |
%u88ab%u5bb3%u8005%u304c%u60aa%u610f%u306e%u3042%u308b Web %u30da%u30fc%u30b8%u3092%u95b2%u89a7%u3057%u307e%u3059%u3002 |
%u7dca%u6025 |
1 |
CVE-2013-3893 %u304a%u3088%u3073CVE-2013-3897 %u306e%u53cc%u65b9%u304c%u7d99%u7d9a%u3057%u3066%u653b%u6483%u3092%u53d7%u3051%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
%u73fe%u5728%u3001%u9650%u5b9a%u3055%u308c%u305f%u653b%u6483%u306b%u304a%u3051%u308b 2 %u4ef6%u306e CVE%u3001%u304a%u3088%u3073%u653b%u6483%u306b%u3055%u3089%u3055%u308c%u3066%u3044%u306a%u3044 8 %u4ef6%u306eCVE %u3092%u89e3%u6c7a%u3057%u307e%u3059%u3002 |
|
(win32k.sys and OTF font parsing) |
%u6700%u3082%u8d77%u3053%u308a%u3046%u308b%u653b%u6483%u30d9%u30af%u30bf%u30fc%u306f%u3001%u653b%u6483%u8005%u304c%u65e2%u306b%u5b9f%u6a5f%u3067%u30b3%u30fc%u30c9%u3092%u5b9f%u884c%u3057%u3066%u3044%u308b%u3053%u3068%u304c%u5fc5%u9808%u3067%u3001%u305d%u306e%u5f8c%u3001%u3053%u306e%u8106%u5f31%u6027%u3092%u7279%u6a29%u306e%u4f4e%u3044%u30a2%u30ab%u30a6%u30f3%u30c8%u304b%u3089 SYSTEM %u306b%u6607%u683c%u3059%u308b%u305f%u3081%u306b%u5229%u7528%u3059%u308b%u3082%u306e%u3067%u3059%u3002 %u4ed6%u306e%u653b%u6483%u30d9%u30af%u30bf%u30fc%u306f%u3001%u88ab%u5bb3%u8005%u304cOTF %u30d5%u30a9%u30f3%u30c8 %u30d5%u30a1%u30a4%u30eb%u3092%u4f7f%u7528%u3059%u308b%u60aa%u610f%u306e%u3042%u308b Web %u30da%u30fc%u30b8%u3092%u95b2%u89a7%u3059%u308b%u3088%u3046%u4ed5%u5411%u3051%u3001%u7d50%u679c%u3068%u3057%u3066 SYSTEM %u3067%u30b3%u30fc%u30c9%u304c%u5b9f%u884c%u3055%u308c%u307e%u3059%u3002 |
%u7dca%u6025 |
1 |
30 %u65e5%u4ee5%u5185%u306b%u60aa%u7528%u30b3%u30fc%u30c9%u304c%u4f5c%u6210%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
|
|
MS13-083 (ComCtl32) |
%u88ab%u5bb3%u8005%u306f%u3001Word %u3042%u308b%u3044%u306f Wordpad %u306e%u3044%u305a%u308c%u304b%u306b%u30b3%u30f3%u30c8%u30ed%u30fc%u30eb%u304c%u7d44%u307f%u8fbc%u307e%u308c%u3066%u3044%u308b%u60aa%u610f%u306e%u3042%u308b RTF %u30d5%u30a1%u30a4%u30eb%u3092%u958b%u304d%u3001%u305d%u306e%u7d50%u679c%u30ed%u30b0%u30aa%u30f3%u3057%u3066%u3044%u308b%u30e6%u30fc%u30b6%u30fc%u306b%u5bfe%u3057%u3066%u30b3%u30fc%u30c9%u304c%u5b9f%u884c%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
%u7dca%u6025 |
1 |
30 %u65e5%u4ee5%u5185%u306b%u60aa%u7528%u30b3%u30fc%u30c9%u304c%u4f5c%u6210%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
ComCtl32 %u306f%u3044%u304f%u3064%u3082%u306e%u7570%u306a%u308b%u30b7%u30ca%u30ea%u30aa%u3067%u5229%u7528%u3055%u308c%u307e%u3059%u3002%u79c1%u305f%u3061%u304c%u4e88%u60f3%u3059%u308b%u3001%u6700%u3082%u8d77%u3053%u308a%u3046%u308b%u653b%u6483%u30d9%u30af%u30bf%u30fc%u306f%u3001Office %u30c9%u30ad%u30e5%u30e1%u30f3%u30c8%u5185%u306e MSCOMCTL %u3092%u4ecb%u3059%u308b%u3082%u306e%u3067%u3059%u3002%u3057%u304b%u3057%u306a%u304c%u3089%u3001%u79c1%u305f%u3061%u306f%u305d%u306e%u4ed6%u306e%u653b%u6483%u30d9%u30af%u30bf%u30fc%u306b%u3064%u3044%u3066%u3082%u89e3%u6c7a%u3059%u308b%u305f%u3081%u306b%u3001%u304a%u5ba2%u69d8%u304c%u3059%u3079%u3066%u306e%u30b7%u30b9%u30c6%u30e0%u306b%u5bfe%u3057%u3066%u66f4%u65b0%u30d7%u30ed%u30b0%u30e9%u30e0%u3092%u9069%u7528%u3059%u308b%u3053%u3068%u3092%u63a8%u5968%u3057%u307e%u3059%u3002 |
|
(.NET Framework) |
%u88ab%u5bb3%u8005%u304c%u3001%u30a4%u30f3%u30c8%u30e9%u30cd%u30c3%u30c8 %u30be%u30fc%u30f3 Web %u30b5%u30a4%u30c8%u304c%u30db%u30b9%u30c8%u3059%u308b%u3001%u60aa%u610f%u306e%u3042%u308b XBAP %u30a2%u30d7%u30ea%u30b1%u30fc%u30b7%u30e7%u30f3%u3092%u95b2%u89a7%u3057%u307e%u3059%u3002 |
%u7dca%u6025 |
2 |
%u3053%u306e%u8106%u5f31%u6027%u3001%u304a%u3088%u3073 .NET Framework %u306e%u8106%u5f31%u6027%u306b%u5bfe%u3057%u3001%u60aa%u7528%u30b3%u30fc%u30c9%u304c%u4f5c%u6210%u3055%u308c%u308b%u53ef%u80fd%u6027%u306f%u4f4e%u3044%u3067%u3059%u3002 |
|
|
(Excel) |
%u88ab%u5bb3%u8005%u304c%u3001%u60aa%u610f%u306e%u3042%u308b Excel %u30b9%u30d7%u30ec%u30c3%u30c9%u30b7%u30fc%u30c8%u3092%u958b%u304d%u307e%u3059%u3002 |
%u91cd%u8981 |
1 |
30 %u65e5%u4ee5%u5185%u306b%u60aa%u7528%u30b3%u30fc%u30c9%u304c%u4f5c%u6210%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
|
|
(Word) |
%u88ab%u5bb3%u8005%u304c%u3001%u60aa%u610f%u306e%u3042%u308b Word %u30c9%u30ad%u30e5%u30e1%u30f3%u30c8%u3092%u958b%u304d%u307e%u3059%u3002 |
%u91cd%u8981 |
1 |
30 %u65e5%u4ee5%u5185%u306b%u60aa%u7528%u30b3%u30fc%u30c9%u304c%u4f5c%u6210%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
Office 2010 %u304a%u3088%u3073 Office 2013 %u306f%u5f71%u97ff%u3092%u53d7%u3051%u307e%u305b%u3093%u3002 |
|
(SharePoint) |
%u653b%u6483%u8005%u306f%u3001%u5f7c%u3089%u304c%u30a2%u30af%u30bb%u30b9%u6a29%u3092%u6301%u3064%u30a4%u30f3%u30c8%u30e9%u30cd%u30c3%u30c8%u306e SharePoint %u30b5%u30fc%u30d0%u30fc%u4e0a%u306e%u30af%u30ed%u30b9%u30b5%u30a4%u30c8 %u30b9%u30af%u30ea%u30d7%u30c6%u30a3%u30f3%u30b0 (XSS) %u306e%u8106%u5f31%u6027%u3092%u60aa%u7528%u3059%u308b%u30ea%u30f3%u30af%u3092%u88ab%u5bb3%u8005%u306b%u5bfe%u3057%u3066%u9001%u4fe1%u3057%u307e%u3059%u3002%u88ab%u5bb3%u8005%u304c%u305d%u306e%u30ea%u30f3%u30af%u3092%u30af%u30ea%u30c3%u30af%u3059%u308b%u3068%u3001%u5b9f%u884c%u3057%u305f%u304f%u306a%u3044%u306b%u3082%u95a2%u308f%u3089%u305a%u3001SharePoint %u30b5%u30fc%u30d0%u30fc%u306e%u4ee3%u308f%u308a%u306b%u81ea%u52d5%u7684%u306b%u30a2%u30af%u30b7%u30e7%u30f3%u304c%u5b9f%u884c%u3055%u308c%u307e%u3059%u3002 |
%u91cd%u8981 |
1 |
30 %u65e5%u4ee5%u5185%u306b%u60aa%u7528%u30b3%u30fc%u30c9%u304c%u4f5c%u6210%u3055%u308c%u308b%u53ef%u80fd%u6027%u304c%u3042%u308a%u307e%u3059%u3002 |
%u65e2%u5b9a%u3067%u3001%u6700%u65b0%u306e%u30d6%u30e9%u30a6%u30b6%u306f%u30a4%u30f3%u30c8%u30e9%u30cd%u30c3%u30c8 %u30be%u30fc%u30f3 %u30b5%u30a4%u30c8%u306b%u304a%u3051%u308b XSS %u653b%u6483%u3092%u9632%u5fa1%u3057%u307e%u3059%u3002 |
|
(Silverlight) |
%u3053%u306e%u8106%u5f31%u6027%u306f%u3001%u653b%u6483%u8005%u304c%u3001%u540c%u4e00%u306e%u30d7%u30ed%u30bb%u30b9%u304b%u3089%u30e1%u30e2%u30ea %u30a2%u30c9%u30ec%u30b9%u3001%u304a%u3088%u3073/%u3042%u308b%u3044%u306f%u30b3%u30f3%u30c6%u30f3%u30c4%u306b%u30a2%u30af%u30bb%u30b9%u3067%u304d%u308b%u3088%u3046%u306b%u3059%u308b%u305f%u3081%u3001%u30de%u30eb%u30c1%u30b9%u30c6%u30fc%u30b8%u306e%u653b%u6483%u306b%u304a%u3044%u3066%u30b3%u30f3%u30dd%u30fc%u30cd%u30f3%u30c8%u3068%u3057%u3066%u4f7f%u7528%u3059%u308b%u3053%u3068%u304c%u3067%u304d%u307e%u3059%u3002 |
%u91cd%u8981 |
%u306a%u3057 |
%u76f4%u63a5%u3001%u30b3%u30fc%u30c9%u304c%u5b9f%u884c%u3055%u308c%u308b%u53ef%u80fd%u6027%u306f%u3042%u308a%u307e%u305b%u3093%u3002 |
%u60c5%u5831%u6f0f%u3048%u3044%u306e%u307f%u3002 |
%u30b8%u30e7%u30ca%u30b5%u30f3%u30fb%u30cd%u30b9%u3001MSRC %u30a8%u30f3%u30b8%u30cb%u30a2%u30ea%u30f3%u30b0
Blog Post by: JSECTEAM